Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-48631

Denial of Service of regular expression in package @adobe/css-tools

Description

@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Not a product

Default version status: affected

  • 0 to ≤ 4.3.1affected

References