CVE-2026-45623

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-63077

creationtimestamp| type| source ---|---|--- 2026-07-27 18:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnidphmxq2j 2026-07-28 09:00:06+00:00| seen| https://t.me/thehackernews/9631 2026-07-28 10:00:53+00:00| seen|...

CVE-2026-17191

creationtimestamp| type| source ---|---|--- 2026-07-27 18:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnia6h6xo2z 2026-07-27 19:49:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrno54pgmv2j...

CVE-2026-66396

creationtimestamp| type| source ---|---|--- 2026-07-27 18:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnia5azfv2a 2026-07-30 04:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltbwyb2j...

CVE-2026-61487

creationtimestamp| type| source ---|---|--- 2026-07-27 18:03:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrni7yb6hz22 2026-07-28 14:58:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpocvshb32e...

CVE-2026-59528

creationtimestamp| type| source ---|---|--- 2026-07-27 18:02:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrni5sssge26 2026-08-12 10:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msuvk6bu7g2l...

CVE-2026-66398

creationtimestamp| type| source ---|---|--- 2026-07-27 18:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnhyzne4w22 2026-07-30 04:56:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltwvjt2e...

CVE-2026-59878

creationtimestamp| type| source ---|---|--- 2026-07-27 17:48:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrnhf5ejkf2n 2026-07-28 15:47:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpr2tprhh2i 2026-07-28 16:01:00+00:00| seen|...

EUVD-2026-49376

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-45623

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-45623 PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-45623 PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-45623

PostCSS vulnerability CVE-2026-45623 affects versions up to 8.5.11. The PreviousMap parses the /*# sourceMappingURL=PATH */ comment from CSS, dereferencing PATH against the local filesystem without scheme, allowlist, or traversal checks. An attacker-controlled CSS input can cause the host process...

CVE-2026-55953

creationtimestamp| type| source ---|---|--- 2026-07-27 17:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnfd5zneb2q 2026-07-28 17:22:25+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-2...

CVE-2026-13714

creationtimestamp| type| source ---|---|--- 2026-07-27 17:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf7ldukf2r 2026-08-02 23:18:17+00:00| published-proof-of-concept| Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U 2026-08-03 00:26:59+00:00|...

CVE-2026-16280

creationtimestamp| type| source ---|---|--- 2026-07-27 17:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf3ynxg322...

CVE-2026-66391

creationtimestamp| type| source ---|---|--- 2026-07-27 16:58:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrnelnpg2m24...

GHSA-GV7G-JM28-CR3M

creationtimestamp| type| source ---|---|--- 2026-07-27 16:55:41+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrnefsqhi72u 2026-07-28 21:00:04+00:00| seen| https://t.me/truesecator/8452 2026-07-29 00:00:12+00:00| seen| https://t.me/truesecator/8452 2026-07-29 01:00:04+00:00| seen|...

CVE-2026-66390

creationtimestamp| type| source ---|---|--- 2026-07-27 16:48:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrndzrqhm622...

MAL-2026-11093 Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...