Approved changes feed: RSS · Atom

cpe:2.3:a:color-string_project:color-string:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorColor String Project (b7956630-b171-5026-ba41-307cc63e87b9)
ProductColor String (27d3e93b-64cc-5967-939e-0e3b7744e227)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/qix-/color-string purl2cpe 2026-06-01 10:16:40.667499

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29060 vulnerable 2026-06-08 05:31:25.606021 Details available
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.
Published: 2021-06-21T15:45:53.000Z
Updated: 2024-08-03T21:55:12.637Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.