1295 matches found
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss (CVE-2026-69153)
Summary A path traversal and source-map file read vulnerability in the postcss package CVE-2026-69153 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.5.23 in FP-15 on both Linux and Windows operating systems. Vulnerability Details...
Malware in @unipswap/postcss-animate-units
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @aaron205whitmore/postcss-animate-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Security Bulletin: A vulnerability affects IBM Db2 Big SQL on IBM Software Hub
Summary A vulnerability affects IBM Db2 Big SQL on IBM Software Hub 5.3 and earlier Vulnerability Details CVEID:CVE-2026-73646 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18,...
CLEANSTART-2026-OM86662 PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree
Security vulnerability affects the frappe-helpdesk package. PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree...
CLEANSTART-2026-HR13917 PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it
Security vulnerability affects the npm package. PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it...
CLEANSTART-2026-VH83166 PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree
Security vulnerability affects the langfuse-worker package. PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree...
MAL-2026-18407 Malicious code in @nexlayerlabs/postcss-keyframe-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ca26cea829c3eb710321f002ade10441a026bef12b2c2eff288d329f203ce2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @nexlayerlabs/postcss-keyframe-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @nexlayerlabs/postcss-keyframe-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ca26cea829c3eb710321f002ade10441a026bef12b2c2eff288d329f203ce2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CLEANSTART-2026-QJ35070 vulnerability was determined in postcss-selector-parser up to 6
Security vulnerability affects the renovate package. A vulnerability was determined in postcss-selector-parser up to 6...
CLEANSTART-2026-ZF74830 PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree
Security vulnerability affects the renovate package. PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree...
CLEANSTART-2026-XR82724 PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it
Security vulnerability affects the renovate package. PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in postcss (CVE-2026-41305, CVE-2026-45623, CVE-2026-69153, CVE-2026-73646)
Summary Multiple vulnerabilities in the postcss package CVE-2026-41305, CVE-2026-45623, CVE-2026-69153, CVE-2026-73646 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 8.5.23 in FP-15 on both Linux and Windows operating systems. Vulnerability...
Malware in @jasperquinn/postcss-motion-helpers
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-18379 Malicious code in @jasperquinn/postcss-motion-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781da369bb3fa6b157a3ae9e923e3311a8b1bfc6ab3af00b31401240e443a652 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @jasperquinn/postcss-motion-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b00f98b05ef64aa83ba1f6d04dfcd96791446c4c45e34f5b5855c56ec2eedb Package @jasperquinn/postcss-motion-helpers at version 0.0.0-stage ships a minimal file set 2 files with no lifecycle scripts, no network activity, n...
Security Bulletin: DataStage on Cloud Pak for Data has a vulnerability due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-45623 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. ...