The d3-color module, used for color space representations in browsers, has a vulnerability in versions from 1.0.2 up to but not including 3.1.0. This vulnerability is a Regular Expression Denial of Service (ReDoS) issue. The vulnerability has been fixed in version 3.1.0. No known workarounds exist for affected versions.