@rootio/postcss vulnerabilities (Root)
7 vulnerabilities.
-
@rootio/postcssRoot PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure 7.5 High -
@rootio/postcssRoot PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset 6.3 Medium -
@rootio/postcssRoot PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments 7.5 High -
@rootio/postcssRoot PostCSS has XSS via Unescaped </style> in its CSS Stringify Output 6.1 Medium -
@rootio/postcssRoot PostCSS line return parsing error 5.3 Medium -
@rootio/postcssRoot Regular Expression Denial of Service (ReDoS) 5.3 Medium -
@rootio/postcssRoot Regular Expression Denial of Service (ReDoS) 5.3 Medium