Lucene search

K
osvGoogleOSV:GHSA-Q8PJ-2VQX-8GGC
HistoryJun 07, 2021 - 10:11 p.m.

Denial of service in css-what

2021-06-0722:11:39
Google
osv.dev
14
denial of service
css-what
node.js
linear time complexity
attribute parsing

EPSS

0.002

Percentile

55.5%

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.