GHSA-hwj9-h5mp-3pm3MediumCVSS 5.3

Regular Expression Denial of Service in postcss

Published
May 10, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-23368 →

📋 Description

The npm package postcss from 7.0.0 and before versions 7.0.36 and 8.2.10 is vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.

🎯 Affected products2

  • npm/postcss:>= 7.0.0, < 7.0.36
  • npm/postcss:>= 8.0.0, < 8.2.10

🔗 References (13)