CVE-2021-29060: Color-String Project Color-String

Medium severity, CVSS 5.3. EPSS: 3.1% chance of exploitation in the next 30 days.

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.

Affected products

• Color-String Project Color-String: before 1.5.5 (fixed in 1.5.5)

Published 2021-06-21. Last modified 2026-06-17.