Description
@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges.
Remediation
References
https://github.com/adobe/css-tools/security/advisories/GHSA-hpx4-r86g-5jrg
Related Vulnerabilities
CVE-2023-49376 Vulnerability in maven package com.jfinal:jfinal
CVE-2020-10734 Vulnerability in maven package org.keycloak:keycloak-oidc-client-adapter-pom
CVE-2022-42009 Vulnerability in maven package org.apache.ambari:ambari
CVE-2023-29521 Vulnerability in maven package org.xwiki.platform:xwiki-platform-vfs-ui
CVE-2015-3269 Vulnerability in maven package org.apache.flex.blazeds:flex-messaging-core