# sonatype-2022-0215

## colors - Intentional Infinite Loop - Protestware [ CVE-2021-23567 ]

Published Jan 9, 2022

**CVSS Score**: High 7.5

## Security Details

### Components Impacted

**CVE ID**: sonatype-2022-0215  
**CWE**: N/A  
**CVE Description**: colors - Intentional Infinite Loop - Protestware [ CVE-2021-23567 ]  
**Published**: Jan 9, 2022  
**CVSS Score & Severity**: 7.5 High  
**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H  
**EPSS Score**: 0%  
**Malware**: malware  
**KEV Status**: Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source**: Sonatype

### References

- [GitHub · Issue #285](https://github.com/Marak/colors.js/issues/285)  
- [bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/)