Every CVE whose affected-product data names Three Project Three, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2020-28496 — CVSS 7.5 (high): This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require('three') function…