CVE-2023-26364 — Denial of Service of regular expression in package @adobe/css-tools

CVE-2023-26364

Denial of Service of regular expression in package @adobe/css-tools PUBLISHED

Description (CNA)

@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges.

Affected (CNA)

Vendor / product	Versions
Adobe / Not a product	affected 0 through 4.3.0

CWE

CWE-20

References

https://github.com/adobe/css-tools/security/advisories/GHSA-hpx4-r86g-5jrg

ADP enrichment

CVE

No English description supplied.

https://github.com/adobe/css-tools/security/advisories/GHSA-hpx4-r86g-5jrg

CISA-ADP

No English description supplied.

No references supplied.