npm/postcss

Regular Expression Denial of Service in postcss

Modified: 1/14/2025

PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

Modified: 9/10/2026

PostCSS line return parsing error

Modified: 9/10/2026

PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

Modified: 9/10/2026

Regular Expression Denial of Service in postcss

Modified: 1/14/2025

PostCSS has XSS via Unescaped </style> in its CSS Stringify Output

Modified: 9/10/2026

PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

Modified: 9/10/2026