New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

d3-color vulnerable to ReDoS #106

Closed

LilithElina opened this issue Nov 10, 2022 · 1 comment

LilithElina commented Nov 10, 2022

Is there any chance of an update to a less vulnerable version of d3-color? See the vulnerability report here.

mbostock closed this as completed

rowanlend mentioned this issue

security(visx/scale): Update for d3-color dependencies? airbnb/visx#1577

Closed

Fil mentioned this issue

d3-color dependency update due to ReDoS #107

Closed

darcyparker commented Jan 10, 2023

The package.json looks fine. But the yarn.lock is pointing to 3.0.1. It needs to be 3.1.0.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment