CVE-2023-48631

@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@adobe.com

Published

2023-12-14

Last modified

2024-08-02

Weaknesses

CWE-1333, CWE-20

Affected products

• Css-tools (Adobe)
• Not A Product (Adobe)

References

• https://github.com/adobe/css-tools/security/advisories/GHSA-prr3-c3m5-p7q2