CVE-2023-48631 — Denial of Service of regular expression in package @adobe/css-tools

CVE-2023-48631

Denial of Service of regular expression in package @adobe/css-tools PUBLISHED

Description (CNA)

@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

Affected (CNA)

Vendor / product	Versions
Adobe / Not a product	affected 0 through 4.3.1

CWE

CWE-20

References

https://github.com/adobe/css-tools/security/advisories/GHSA-prr3-c3m5-p7q2

ADP enrichment

CVE

No English description supplied.

https://github.com/adobe/css-tools/security/advisories/GHSA-prr3-c3m5-p7q2