Vulnerabilities > CSS What Project > CSS What > 0.4.3

DATE CVE VULNERABILITY TITLE RISK
2022-09-30 CVE-2022-21222 Unspecified vulnerability in Css-What Project Css-What
The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of insecure regular expression in the re_attr variable of index.js.
network
low complexity
css-what-project
7.5