The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper usage of regular expression in the parser of Colors.js.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01637·Published 2022-09-30·Fixed in 3.0.0-rc.1, 2.10.0CWE-1333