postcss: PostCSS: Information disclosure via crafted sourceMappingURL

🗓️ 20 Aug 2026 16:08:12Reported by RedHatType

redhat🔗 access.redhat.com👁 22 Views

PostCSS information disclosure via crafted sourceMappingURL when from parameter is unset, exposing source maps.

Reporter	Title	Published	Views	Family All 323
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses ansible_core-2.19.11, postcss-8.5.10 and dompurify-3.4.11 which are vulnerable to CVE-2026-16493, CVE-2026-45623, CVE-2026-69153 and CVE-2026-66010	28 Aug 202610:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153.	30 Sep 202611:37	–	ibm
IBM Security Bulletins	Security Bulletin: : IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Sep 202606:38	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-66010, CVE-2026-54515, CVE-2026-59889, CVE-2026-49844, CVE-2026-69153)	28 Aug 202605:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities	21 Sep 202618:24	–	ibm
IBM Security Bulletins	Security Bulletin: The Analyst Workflow App for IBM QRadar SIEM contains components with known vulnerabilities	25 Sep 202619:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses third party libraries which is vulnerable to multiple cves.	1 Oct 202610:46	–	ibm
attackerkb	CVE-2026-69153	3 Aug 202616:56	–	attackerkb
Chainguard	CVE-2026-69153 vulnerabilities	4 Aug 202620:23	–	cgr
Circl	CVE-2026-69153	3 Aug 202618:28	–	circl

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	10.2	x86_64	rh-podman-desktop	1.1.2-1.el10_2	rh-podman-desktop-1.1.2-1.el10_2.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-69153
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8
github	www.github.com/postcss/postcss/releases/tag/8.5.19
github	www.github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-69153
cve	www.cve.org/CVERecord

02 Oct 2026 04:40Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.3

CVSS 46.3

EPSS0.00451

SSVC

PostCSS information disclosure source map crafted input remote attack source code exposure misconfiguration