| Package | Affected versions | Patched versions |
|---|---|---|
| rgb2hex | < 0.1.6 | 0.1.6 |
All versions of rgb2hex are vulnerable to Regular Expression Denial of Service (ReDoS) when an attacker can pass in a specially crafted invalid color value.
Update to version 0.1.6 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free