three (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package three, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2020-28496 — CVSS 7.5 (high): This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require('three') function…