Severity: high

    Denial of Service

    css-what

    Overview

    css-what before 5.0.1 does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.

    Remediation

    Upgrade to version 5.0.1 or later

    Resources

    Have content suggestions? Visit npmjs.com/support.

    Advisory timeline

    1. published

      Advisory Published
      Jun 7th, 2021
    2. reported

      Reported by Anonymous
      Jun 7th, 2021