This repository has been archived by the owner on Jan 30, 2023. It is now read-only.
CVE-2021-33587 (High) detected in css-what-4.0.0.tgz #232
Labels
security vulnerability
Security vulnerability detected by WhiteSource
CVE-2021-33587 - High Severity Vulnerability
a CSS selector parser
Library home page: https://registry.npmjs.org/css-what/-/css-what-4.0.0.tgz
Path to dependency file: UploadNow/package.json
Path to vulnerable library: UploadNow/node_modules/css-what/package.json
Dependency Hierarchy:
Found in HEAD commit: 974216fff41a206aae71650ad1f9ff54650b2150
Found in base branch: master
The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
Publish Date: 2021-05-28
URL: CVE-2021-33587
Base Score Metrics:
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33587
Release Date: 2021-05-28
Fix Resolution: css-what - 5.0.1
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: