Lucene search
GitHub Advisory DatabaseGHSA-Q8PJ-2VQX-8GGCHistoryJun 07, 2021 - 10:11 p.m.
Denial of service in css-what
2021-06-0722:11:39
CWE-400
GitHub Advisory Database
github.com
111
0.002 Low
EPSS
Percentile
55.2%
The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
References
github.com/advisories/GHSA-q8pj-2vqx-8ggc
github.com/fb55/css-what/commit/4cdaacfd0d4b6fd00614be030da0dea6c2994655
github.com/fb55/css-what/releases/tag/v5.0.1
lists.debian.org/debian-lts-announce/2023/03/msg00001.html
nvd.nist.gov/vuln/detail/CVE-2021-33587
security.netapp.com/advisory/ntap-20210706-0007/
Related
nodejs
nodejs
Denial of Service
2021-06-07 22:13:06
cvelist
cvelist
CVE-2021-33587
2021-05-28 00:00:00
cve
cve
CVE-2021-33587
2021-05-28 20:15:00
osv
osv
CVE-2021-33587
2021-05-28 20:15:07
Denial of service in css-what
2021-06-07 22:11:39
node-css-what - security update
2023-03-03 00:00:00
ubuntucve
ubuntucve
CVE-2021-33587
2021-05-28 00:00:00
prion
prion
Input validation
2021-05-28 20:15:00
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2021-05-31 02:49:43
debiancve
debiancve
CVE-2021-33587
2021-05-28 20:15:00
redhatcve
redhatcve
CVE-2021-33587
2021-05-31 17:27:12
debian
debian
[SECURITY] [DLA 3350-1] node-css-what security update
2023-03-03 10:50:30
nessus
nessus
Debian DLA-3350-1 : node-css-what - LTS security update
2023-03-03 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6065-1)
2023-05-11 00:00:00
Debian: Security Advisory (DLA-3350-1)
2023-03-08 00:00:00
ubuntu
ubuntu
css-what vulnerabilities
2023-05-10 00:00:00