Hi, Looking at CVE-2021-33587 patch, it seems too intrusive to be applied for Bullseye: patch seems not easily usable for version 4 of node-css-what. Could you tag it ? Cheers, Yadd