The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
References
Link | Resource |
---|---|
https://github.com/fb55/css-what/releases/tag/v5.0.1 | Patch Release Notes Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2023/03/msg00001.html | |
https://security.netapp.com/advisory/ntap-20210706-0007/ | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-05-28T00:00:00
Updated: 2023-03-03T00:00:00
Reserved: 2021-05-27T00:00:00
Link: CVE-2021-33587
JSON object: View
NVD Information
Status : Modified
Published: 2021-05-28T20:15:07.733
Modified: 2023-03-03T13:15:10.057
Link: CVE-2021-33587
JSON object: View
Redhat Information
No data.
CWE