Red Hat JBoss Enterprise Application Platform 7/postcss
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments | postcssMigration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8 | npmRed Hat | High | Fix reported | |
| PostCSS has XSS via Unescaped </style> in its CSS Stringify Output | postcssCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | Fix reported | |
| postcss-selector-parser allows denial of service through uncontrolled AST recursion | postcss-selector-parserCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Low | Fix reported |