GHSA-hpx4-r86g-5jrg
@adobe/css-tools Regular Expression Denial of Service (ReDOS) while Parsing CSS
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @adobe/css-tools | < 4.3.1 | 4.3.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.
### Patches
The issue has been resolved in 4.3.1.
### Workarounds
None
### References
N/A
References
External links from the advisory. They lead to third-party sites.