Description
@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges.
Remediation
References
https://github.com/adobe/css-tools/security/advisories/GHSA-hpx4-r86g-5jrg
Related Vulnerabilities
CVE-2023-40340 Vulnerability in maven package org.jenkins-ci.plugins:nodejs
CVE-2017-4991 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-uaa
CVE-2023-2632 Vulnerability in maven package org.jenkins-ci.plugins:codedx
CVE-2017-18355 Vulnerability in npm package rendertron-middleware
CVE-2023-48796 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-master