Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/10/05 10:53 p.m.•53 views

PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

Impact . and are not word delimiters in the tokenizer, so a flat selector such as .a.a.a... reaches splitWord as a single word token carrying n class or id indexes. Three passes scanned those index arrays linearly for every index, making the parse On^2 in the number of indexes rather than in inpu...

5.9CVSS5.6AI score0.00389EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder