postcss vulnerabilities (npm)
6 vulnerabilities.
-
postcssnpm PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset 6.3 Medium -
postcssnpm PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments 7.5 High -
postcssnpm PostCSS has XSS via Unescaped </style> in its CSS Stringify Output 6.1 Medium -
postcssnpm PostCSS line return parsing error 5.3 Medium -
postcssnpm Regular Expression Denial of Service (ReDoS) 5.3 Medium -
postcssnpm Regular Expression Denial of Service (ReDoS) 5.3 Medium