Description
@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.
Remediation
References
https://github.com/adobe/css-tools/security/advisories/GHSA-prr3-c3m5-p7q2
Related Vulnerabilities
CVE-2016-0763 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2023-25571 Vulnerability in npm package @backstage/plugin-catalog-backend
CVE-2019-5448 Vulnerability in maven package org.webjars.npm:yarn
CVE-2018-17960 Vulnerability in maven package org.webjars.npm:ckeditor
CVE-2023-35926 Vulnerability in npm package @backstage/plugin-scaffolder-backend