Description
@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | Not a product | ≤ 4.3.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @adobe/css-tools | < 4.3.2 | 4.3.2 | GHSA-prr3-c3m5-p7q2 |
Advisories 2
- WID-SEC-2026-1229 Atlassian Bamboo, Bitbucket, Confluence, Jira: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 2, 2026
- WID-SEC-2024-1226 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026