Colors.js Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Colors.js Project records in CISA KEV

No Colors.js Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Colors.js · all components

TI-2021-06165 CVE-2021-23567 · GHSA-gh88-3pxp-6fm8

LOW 36

The package colors after 1.4.0 are vulnerable to Denial of Service (DoS) that was introduced through an infinite loop in the americanFlag module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0179 Published 2022-01-14 No fix listed CWE-835