ROOT-APP-NPM-CVE-2026-73646 CVE-2026-73646 in postcss - Patched by Root

Root has patched CVE-2026-73646 in the postcss package for Root:npm. Multiple fixed versions available...

DEBIAN-CVE-2026-73646

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap passes attacker-controlled sourceMappingURL values to joindirnameopts.from, annotation, and loadFile permits traversed ...

CVE-2026-73646 vulnerabilities

Vulnerabilities for packages: nextcloud-server, jitsucom-jitsu, vitess, langfuse...