Information Disclosure at postcss Dependency in Bamboo Data Center

🗓️ 27 Jul 2026 18:30:38Reported by security-metrics-botType

Unauthenticated info disclosure in Bamboo Data Center via postcss reads local files.

Reporter	Title	Published	Views	Family All 257
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses ansible_core-2.19.11, postcss-8.5.10 and dompurify-3.4.11 which are vulnerable to CVE-2026-16493, CVE-2026-45623, CVE-2026-69153 and CVE-2026-66010	28 Aug 202610:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	8 Sep 202615:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses postcss-8.4.38.tgz package which is vulnerable to CVE-2026-45623.	27 Aug 202619:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty,Spring Boot,ZDRES-232,Apache HttpComponents,Spring Security,PostCSS,spring-cloud-gateway-server might affect IBM Storage Defender Copy Data Management	30 Sep 202617:03	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202605:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-45623	1 Sep 202613:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	28 Sep 202608:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.	7 Sep 202611:00	–	ibm
attackerkb	CVE-2026-45623	27 Jul 202617:23	–	attackerkb
Chainguard	CVE-2026-45623 vulnerabilities	28 Jul 202608:22	–	cgr