Postcss vulnerabilities
Products
- Postcss 7
Newest
- postcss postcss-selector-parser PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion 5.9 Medium
- postcss PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure 7.5 High
- postcss PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset 6.3 Medium
- postcss PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments 7.5 High
- postcss PostCSS has XSS via Unescaped </style> in its CSS Stringify Output 6.1 Medium
- postcss PostCSS line return parsing error 5.3 Medium
- postcss Regular Expression Denial of Service (ReDoS) 5.3 Medium
- postcss Regular Expression Denial of Service (ReDoS) 5.3 Medium