node-postcss vulnerabilities (Ubuntu)
13 vulnerabilities.
-
node-postcssUbuntu source-map-js through 1.2.1 Event Loop Denial of Service 8.7 High -
node-postcssUbuntu PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure 7.5 High -
node-postcssUbuntu nanoid: Integer Overflow or Wraparound 7.4 High -
node-postcssUbuntu nanoid Infinite Loop via Negative Size in non-secure module 8.2 High -
node-postcssUbuntu nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom 8.2 High -
node-postcssUbuntu PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset 6.3 Medium -
node-postcssUbuntu PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments 7.5 High -
node-postcssUbuntu PostCSS has XSS via Unescaped </style> in its CSS Stringify Output 6.1 Medium -
node-postcssUbuntu Predictable results in nanoid generation when given non-integer values 4.3 Medium -
node-postcssUbuntu PostCSS line return parsing error 5.3 Medium -
node-postcssUbuntu Information Exposure 4.0 Medium -
node-postcssUbuntu Regular Expression Denial of Service (ReDoS) 5.3 Medium -
node-postcssUbuntu Regular Expression Denial of Service (ReDoS) 5.3 Medium