Vulnerability with d3-color

[AndrewJohnBenjamin]

A new vulnerability has been detected with the d3-color package that make is vulnerable to ReDOS attacks. Upgrading to version 3 of d3-color solves this issue.

The following libraries also make use of d3-color and would need to be upgraded to ^3.0.0 in order to remove this vulnerability

• d3-interpolate

Is this something you are aware of and willing to fix?

Thanks

• Andy

[gustavos-br]

I have the same problem here...