Red Hat Build of Keycloak/postcss
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments | postcssMigration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8 | npmRed Hat | High | Fix reported | |
| PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset | postcssCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | Fix reported | |
| postcss-selector-parser allows denial of service through uncontrolled AST recursion | postcss-selector-parserCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Low | Fix reported |