https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:55:02 +0000 https://vulnerability.circl.lu/vuln/cve-2021-33587 <p>The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.</p> <p>The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.</p> https://vulnerability.circl.lu/vuln/cve-2021-33587 https://vulnerability.circl.lu/vuln/usn-6065-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: node-css-what, Ubuntu:18.04:LTS: node-css-what, Ubuntu:Pro:20.04:LTS: node-css-what</p> <p>It was discovered that css-what incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-33587, CVE-2022-21222)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: node-css-what, Ubuntu:18.04:LTS: node-css-what, Ubuntu:Pro:20.04:LTS: node-css-what</p> <p>It was discovered that css-what incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-33587, CVE-2022-21222)</p> https://vulnerability.circl.lu/vuln/usn-6065-1