[CRITICAL] Code injection vulnerability in allSelectors()

PKSA-2b5y-mhcw-mt5g CVE-2020-13756 GHSA-phrq-v4q2-hmq6

Affected package: sabberworm/php-css-parser

Affected version: >=8.3.0,<8.3.1|>=8.2.0,<8.2.1|>=8.1.0,<8.1.1|>=8.0.0,<8.0.1|>=7.0.0,<7.0.4|>=6.0.0,<6.0.2|>=5.2.0,<5.2.1|>=5.1.0,<5.1.3|>=5.0.0,<5.0.9|>=4.0.0,<4.0.1|>=3.0.0,<3.0.1|>=2.0.0,<2.0.1|>=1.0.0,<1.0.1

Reported by:
GitHub, FriendsOfPHP/security-advisories