css-what project records
2 published records for vendor css-what project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2021-33587No exploit | The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size css-what project · css-what | High7.5 | — | 2.0% | May 28, 2021 |
31Monitor | CVE-2022-21222No exploit | Regular Expression Denial of Service (ReDoS)css-what project · css-what · CWE-1333 | High7.5 | — | 1.9% | Sep 30, 2022 |
- CVE-2021-3358731Monitor
The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size
HighCVSS 7.5No exploitEPSS 2%css-what project · css-whatMay 28, 2021
- CVE-2022-2122231Monitor
Regular Expression Denial of Service (ReDoS)
HighCVSS 7.5No exploitEPSS 1%css-what project · css-whatSep 30, 2022