Description
@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges.
Remediation
References
https://github.com/adobe/css-tools/security/advisories/GHSA-hpx4-r86g-5jrg
Related Vulnerabilities
CVE-2023-24445 Vulnerability in maven package org.jenkins-ci.plugins:openid
CVE-2019-1003035 Vulnerability in maven package org.jenkins-ci.plugins:azure-vm-agents
CVE-2021-45456 Vulnerability in maven package org.apache.kylin:kylin-server-base
CVE-2017-4963 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-common
CVE-2023-28628 Vulnerability in maven package lambdaisland:uri