GHSA-prr3-c3m5-p7q2MediumCVSS 5.0

@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity

Published
November 30, 2023
Last Modified
December 14, 2023

🔗 CVE IDs covered (1)

CVE-2023-48631 →

📋 Description

Impact

@adobe/css-tools version 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

Patches

The issue has been resolved in 4.3.2.

Workarounds

None

References

N/A

🎯 Affected products1

  • npm/@adobe/css-tools:< 4.3.2

🔗 References (6)