Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Postcss
MEDIUM 5.3
CVE-2026-69153
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19,…
Fix: 8.5.23+
Fix from $1,600
2026-08-03
Postcss
CRITICAL 9.1
CVE-2026-45623
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.…
Fix: 8.5.12+
Fix from $2,300
2026-07-27
Postcss
MEDIUM 5.3
CVE-2023-44270
An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can pr…
Fix: 8.4.31+
Fix from $1,600
2023-09-29
Postcss
HIGH 7.5
CVE-2021-23382
The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/p…
Fix: 7.0.36 / 8.2.13+
Fix from $1,950
2021-04-26
Postcss
MEDIUM 5.3
CVE-2021-23368
The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.
Fix: 7.0.36 / 8.2.10+
Fix from $1,600
2021-04-12