Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Single Sign-On 7/postcss
Red Hat
· Package
5 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
CVE-2026-45623 · GHSA-6G55-P6WH-862Q
postcss
Migration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8
npm
Red Hat
High
Fix reported
2026-09-10
PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
CVE-2026-41305 · GHSA-QX2V-QP2M-JG93
postcss
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-10
PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
CVE-2026-69153 · GHSA-FXQJ-RQCC-2CMP
postcss
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-10
PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
CVE-2026-73646 · GHSA-R28C-9Q8G-F849
postcss
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
postcss-selector-parser allows denial of service through uncontrolled AST recursion
CVE-2026-9358 · GHSA-W9M9-85WC-3X92
postcss-selector-parser
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Low
Fix reported
2026-09-10
