pypi package report

Is clean-css safe?

1 known vulnerability, worst severity LOW.

cvss

2.5

how bad it is if exploited, out of 10

epss

not scored

chance of exploitation in the next 30 days

xyz score

1.1

CyberXYZ composite, out of 10

fig. 01 — GHSA-wxhq-pm8v-cw75, the advisory selected below

// advisories

GHSA-wxhq-pm8v-cw75

LOW

Version of clean-css prior to 4.1.11 are vulnerable to Regular Expression Denial of Service (ReDoS). Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial of Service.

Affected: < 4.1.11
Fixed in: 4.1.11
Published: 2019-06-05
Source: github

GHSA reference reference

// dependencies

0 direct

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 01:43 UTC. The most recent advisory here was published 2019-06-05. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is clean-css safe? pypi package security report | CyberXYZ