GHSA-PRR3-C3M5-P7Q2 @adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity

🗓️ 30 Nov 2023 19:51:29Reported by GoogleType

osv

osv🔗 osv.dev👁 15 Views

@adobe/css-tools Improper Input Validation vulnerability resolved in version 4.3.

Reporter	Title	Published	Views	Family All 22
BDU FSTEC	The vulnerability of the CSS parser for Node.js’s css-tools arises from insufficient validation of input data, allowing attackers to trigger a service failure.	19 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-48631	21 Dec 202315:42	–	circl
CNNVD	Adobe css-tools Input Validation Error Vulnerability	14 Dec 202300:00	–	cnnvd
Atlassian	DoS (Denial of Service) css Dependency in Confluence Data Center	8 Apr 202604:29	–	atlassian
CVE	CVE-2023-48631	14 Dec 202313:09	–	cve
Cvelist	CVE-2023-48631 Denial of Service of regular expression in package @adobe/css-tools	14 Dec 202313:09	–	cvelist
EUVD	EUVD-2023-3011	3 Oct 202520:07	–	euvd
Github Security Blog	@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity	30 Nov 202319:51	–	github
GitLab Advisory Database	@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity	14 Dec 202300:00	–	gitlab
Microsoft CVE	Adobe Systems Incorporated: CVE-2023-Improper Input Validation Denial of Service Vulnerability	11 Jan 202408:00	–	mscve

Source	Link
github	www.github.com/adobe/css-tools/security/advisories/GHSA-prr3-c3m5-p7q2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-48631
github	www.github.com/adobe/css-tools/issues/211
github	www.github.com/adobe/css-tools/pull/249
github	www.github.com/adobe/css-tools/commit/472bef91bde9caab305f3f36231ad0c253581b43
github	www.github.com/adobe/css-tools

04 May 2026 08:45Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15

EPSS0.01121

adobe css tools improper input validation denial of service inefficient regular expression complexity vulnerability patch software