---
title: "GHSA-prr3-c3m5-p7q2: @adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity"
description: "Moderate severity. @adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity. Affects @adobe/css-tools; fixed in 4.3.2."
url: https://inlinr.com/advisories/GHSA-prr3-c3m5-p7q2
lang: en
---

[Packages](https://inlinr.com/packages) / [@adobe/css-tools](https://inlinr.com/packages/@adobe/css-tools) / [Security](https://inlinr.com/packages/@adobe/css-tools/security)

Moderate Vulnerability GHSA-prr3-c3m5-p7q2 CVE-2023-48631 Published 30 Nov 2023

# @adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity

Your version 

Affected releases · [@adobe/css-tools](https://inlinr.com/packages/@adobe/css-tools)

- 4.x 4.0.0 – 4.3.1 Fixed in 4.3.2

On 4.x, the newest line:

```
npm install @adobe/css-tools@4.3.2
```

Every release on a timeline

1. Affected

4.0.0 – 4.3.1  
7 releases
2. Fixed

4.3.2 – 4.5.0  
8 releases, latest

15 stable releases of @adobe/css-tools, oldest to newest.

## What happens

Impact

@adobe/css-tools version 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

Patches

The issue has been resolved in 4.3.2.

Workarounds

None

References

N/A

## How it is exploited

Exploitable over the network, with a low-privilege account and no action from a user.

- **Confidentiality**: none
- **Integrity**: none
- **Availability**: low

CVSS:3.1/​AV:N/​AC:L/​PR:L/​UI:N/​S:C/​C:N/​I:N/​A:L

## References

- [Reference](https://github.com/adobe/css-tools/security/advisories/GHSA-prr3-c3m5-p7q2 "https://github.com/adobe/css-tools/security/advisories/GHSA-prr3-c3m5-p7q2")  
github.com/adobe/css-tools/security/advisories/…
- [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-48631 "https://nvd.nist.gov/vuln/detail/CVE-2023-48631")  
nvd.nist.gov/vuln/detail/CVE-2023-48631
- [Issue](https://github.com/adobe/css-tools/issues/211 "https://github.com/adobe/css-tools/issues/211")  
#211
- [Pull request](https://github.com/adobe/css-tools/pull/249 "https://github.com/adobe/css-tools/pull/249")  
#249
- [Fix commit](https://github.com/adobe/css-tools/commit/472bef91bde9caab305f3f36231ad0c253581b43 "https://github.com/adobe/css-tools/commit/472bef91bde9caab305f3f36231ad0c253581b43")  
472bef9
- [Package](https://github.com/adobe/css-tools "https://github.com/adobe/css-tools")  
github.com/adobe/css-tools