GHSA-hpx4-r86g-5jrg

ghsaUSosv

@adobe/css-tools Regular Expression Denial of Service (ReDOS) while Parsing CSS

view advisory published 2023-08-29Licence: CC-BY-4.0

### Impact @adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS. ### Patches The issue has been resolved in 4.3.1. ### Workarounds None ### References N/A

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-26364US	—	1.15% (67th)	—	2023-11-17
@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS.…

references

External citations — patches, advisories, analysis.

https://github.com/adobe/css-toolsPACKAGE
https://github.com/adobe/css-tools/commit/2b09a25d1dbdbb16fe80065e4c9beb5623ee5793WEB
https://github.com/adobe/css-tools/security/advisories/GHSA-hpx4-r86g-5jrgWEB
https://nvd.nist.gov/vuln/detail/CVE-2023-26364ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan