Affected versions of this package are vulnerable to Interpretation Conflict in the tokenizer process. An attacker can inject arbitrary CSS declarations, style rules, or at-rules by crafting malicious CSS input that exploits incorrect tokenization of bad URLs, potentially bypassing sanitizers and leading to UI redress, loading of external resources, or CSS-based data exfiltration.