Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-48631 EUVD-2023-3011GHSA-prr3-c3m5-p7q2

Denial of Service of regular expression in package @adobe/css-tools

Published Dec 14, 2023 · Updated Aug 2, 2024 · Assigned by adobe

Description

@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

Affected products

VendorProductAffectedFixed
Adobe Not a product ≤ 4.3.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm @adobe/css-tools < 4.3.2 4.3.2 GHSA-prr3-c3m5-p7q2

Advisories 2

References