github_osv/GHSA-q8pj-2vqx-8ggc
Denial of service in css-what
The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
gitlab/npm/css-what/CVE-2021-33587
Inefficient Algorithmic Complexity
The css-what package for Node.js does not ensure that attribute parsing has linear time complexity relative to the size of the input.