CVE-2024-25885: Regular Expression Denial of Service (ReDOS) in xhtml2pdf. Discover a critical vulnerability affecting xhtml2pdf v0.2.13. The getcolor function in utils.py is susceptible to a Regular expression Denial of Service (ReDOS) attack. Attackers can exploit this by supplying a crafted string. Although the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) is 30, indicating a potential, though not critical, risk. A successful exploit can lead to service disruption. This CVE highlights the importance of input validation to prevent resource exhaustion. While not immediately critical, monitoring for exploitation attempts is advisable.