CSS What

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-33587	NetApp E Series Performance Analyzer	Hig	0.42	7.5	0.02		May 28, 2021	The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
CVE-2022-21222	CSS What Project CSS What	Med	0.28	5.3	0.02		Sep 30, 2022	The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of insecure regular expression in the re_attr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function.

CVE-2021-33587HigMay 28, 2021
NetApp
E Series Performance Analyzer
risk 0.42cvss 7.5epss 0.02
The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
CVE-2022-21222MedSep 30, 2022
CSS What Project
CSS What
risk 0.28cvss 5.3epss 0.02
The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of insecure regular expression in the re_attr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function.