Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-21222

Regular Expression Denial of Service (ReDoS)

The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of insecure regular expression in the re_attr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function.

CVSS 3.1 · 5.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Css-what Project
Products
Css-what
CVE-2021-33587

nodejs-css-what: does not ensure that attribute parsing has linear time complexity relative to the size of the input

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Css-what Project Netapp
Products
Css-what E-series Performance Analyzer