Lucene search
K

6 matches found

Snyk
Snyk
added 2026/05/24 7:39 a.m.8 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the toString function in the AST Serialization. An attacker can cause uncontrolled recursion by providing specially crafted input, potentially resulting in resource exhaustion and application unavailability...

6.9CVSS5.8AI score0.00036EPSS
Exploits0References2
NVD
NVD
added 2026/05/24 6:16 a.m.8 views

CVE-2026-9358

A vulnerability was determined in postcss up to 7.1.1. Affected is the function toString of the file src/selectors/container.js of the component AST Serialization. Executing a manipulation can lead to uncontrolled recursion. It is possible to launch the attack remotely. The exploit has been...

5.3CVSS0.00036EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/24 5:30 a.m.11 views

CVE-2026-9358 postcss AST Serialization container.js toString recursion

A vulnerability was determined in postcss up to 7.1.1. Affected is the function toString of the file src/selectors/container.js of the component AST Serialization. Executing a manipulation can lead to uncontrolled recursion. It is possible to launch the attack remotely. The exploit has been...

5.3CVSS0.00036EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/24 5:30 a.m.3 views

CVE-2026-9358 postcss AST Serialization container.js toString recursion

A vulnerability was determined in postcss up to 7.1.1. Affected is the function toString of the file src/selectors/container.js of the component AST Serialization. Executing a manipulation can lead to uncontrolled recursion. It is possible to launch the attack remotely. The exploit has been...

5.3CVSS5.5AI score0.00036EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/24 12:0 a.m.3 views

PostCSS 安全漏洞

PostCSS is an open-source style transformation tool developed by PostCSS. Versions of PostCSS 7.1.1 and earlier contained a security vulnerability. This vulnerability stemmed from improper handling of the toString function in the file/src/selectors/container.js component AST serialization, which...

5.3CVSS5.8AI score0.00036EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/24 12:0 a.m.8 views

PT-2026-42916

A vulnerability was determined in postcss up to 7.1.1. Affected is the function toString of the file src/selectors/container.js of the component AST Serialization. Executing a manipulation can lead to uncontrolled recursion. It is possible to launch the attack remotely. The exploit has been...

5.3CVSS5.5AI score0.00036EPSS
Exploits0References4
Rows per page
Query Builder