Description
@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.
Remediation
References
https://github.com/adobe/css-tools/security/advisories/GHSA-prr3-c3m5-p7q2
Related Vulnerabilities
CVE-2020-12480 Vulnerability in maven package com.typesafe.play:play_2.12
CVE-2022-34179 Vulnerability in maven package org.jenkins-ci.plugins:embeddable-build-status
CVE-2019-10319 Vulnerability in maven package org.jenkins-ci.plugins:pam-auth
CVE-2023-24436 Vulnerability in maven package org.jenkins-ci.plugins:ghprb
CVE-2023-34455 Vulnerability in maven package org.xerial.snappy:snappy-java