We are still processing this advisory. You may have affected repositories that are not yet on this list. Check back soon for more.
>= 4.0.0, <= 5.0.0
The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.