GHSA-hpx4-r86g-5jrgMediumCVSS 5.0

@adobe/css-tools Regular Expression Denial of Service (ReDOS) while Parsing CSS

Published
August 29, 2023
Last Modified
November 17, 2023

🔗 CVE IDs covered (1)

CVE-2023-26364 →

📋 Description

Impact

@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

Patches

The issue has been resolved in 4.3.1.

Workarounds

None

References

N/A

🎯 Affected products1

  • npm/@adobe/css-tools:< 4.3.1

🔗 References (4)