@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity

높음 7.5CVE-2023-48631 · GHSA-prr3-c3m5-p7q2 · Published 14/12/2023 · updated 17/06/2026

요약

CVE-2023-48631은(는) css-tools (adobe), @adobe/css-tools에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.1%, 전체 취약점의 66.2%보다 높음.
조치: 4.3.2 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
css-tools adobe	`< 4.3.2`	`4.3.2`
@adobe/css-tools npm	`< 4.3.2`	`4.3.2`

Description

Impact

@adobe/css-tools version 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

Patches

The issue has been resolved in 4.3.2.

Workarounds

None

References

N/A

NVD description

@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

References

adobe/css-tools security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2023-48631 · ADVISORY
adobe/css-tools · WEB
adobe/css-tools#249 · WEB
adobe/css-tools commit 472bef9 · WEB
adobe/css-tools · PACKAGE

css-tools의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free