Start for Free
npm

postcss

View on npm registry
7 Total advisories
7 Vulnerabilities
0 Malware

Vulnerabilities

UNKNOWN
npm

CVE-2026-69153

PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
HIGH 7.5
npm

GHSA-r28c-9q8g-f849

PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
HIGH 7.5
npm

CVE-2026-45623

PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
MEDIUM 5.3
npm

CVE-2023-44270

PostCSS line return parsing error
MEDIUM 6.1
npm

CVE-2026-41305

PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
MEDIUM 5.3
npm

CVE-2021-23368

Regular Expression Denial of Service in postcss
MEDIUM 5.3
npm

CVE-2021-23382

Regular Expression Denial of Service in postcss

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes