PT-2026-42916

🗓️ 24 May 2026 00:00:00Reported by Positive TechnologiesType

PostCSS vulnerability up to 7.1.1 allows remote denial of service via recursive toString in AST serialization.

Reporter	Title	Published	Views	Family All 526
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss-selector-parser (CVE-2026-9358)	23 Sep 202609:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	2 Feb 202614:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tar-6.2.1.tgz	13 Apr 202613:07	–	ibm
IBM Security Bulletins	Security Bulletin: Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	14 Jul 202612:55	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2026.	5 May 202621:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	27 Mar 202616:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM Data Product Hub	10 Jul 202615:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Endpoint Management is effected by Multiple Vulnerabilities	20 Sep 202614:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service	6 May 202613:05	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ghsa-3ppc-4f35-3m26
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-9496
osv	www.osv.dev/vulnerability/CVE-2026-9679
osv	www.osv.dev/vulnerability/CVE-2026-16728
osv	www.osv.dev/vulnerability/GHSA-w9m9-85wc-3x92
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-24001
osv	www.osv.dev/vulnerability/ghsa-jxxr-4gwj-5jf2
github	www.github.com/postcss/postcss-selector-parser/commit/5bc698cef66f8abd12610dc623e5d67cbc0f869d
osv	www.osv.dev/vulnerability/CVE-2026-11525
osv	www.osv.dev/vulnerability/CVE-2026-45149

18 Sep 2026 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.9 - 9.8

CVSS 34.3

CVSS 25

CVSS 45.3

EPSS0.0058

SSVC