6 matches found
GHSA-RJ75-HQRM-R3GF PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion
Impact . and are not word delimiters in the tokenizer, so a flat selector such as .a.a.a... reaches splitWord as a single word token carrying n class or id indexes. Three passes scanned those index arrays linearly for every index, making the parse On^2 in the number of indexes rather than in inpu...
5.9CVSS5.9AI score0.00394EPSS
SaveExploits0References5
20