1102 matches found
Malicious code in tailwind-animationlab (npm)
tailwind-animationlab 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by adriannamrr on 2026-09-28. src/motion.js:5 requires the private scoped package...
Malicious code in animate-twcss-pack (npm)
animate-twcss-pack 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...
CLSA-2026-1792164288 TuxCare security update for postcss (3 CVEs)
TuxCare rebuilt postcss to address 3 CVEs. Fixed in 8.4.17-tuxcare.1...
CLSA-2026-1792164187 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.33-tuxcare.1...
CLSA-2026-1792160907 TuxCare security update for postcss (3 CVEs)
TuxCare rebuilt postcss to address 3 CVEs. Fixed in 6.0.23-tuxcare.1...
CLEANSTART-2026-ZS54196 PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it
CVE-2026-104844 affects multiple packages. PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. See references for individual vulnerability details...
CLEANSTART-2026-RL61109 vulnerability was determined in postcss-selector-parser up to 6
Security vulnerability affects the renovate package. A vulnerability was determined in postcss-selector-parser up to 6...
CLSA-2026-1791832298 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.5.12-tuxcare.2...
CLSA-2026-1791806570 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.5.3-tuxcare.3...
CLSA-2026-1791806458 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.5.2-tuxcare.3...
CLSA-2026-1791633202 TuxCare security update for postcss (4 CVEs)
TuxCare rebuilt postcss to address 4 CVEs. Fixed in 8.4.49-tuxcare.1...
CLSA-2026-1791633097 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.5.17-tuxcare.2...
CLSA-2026-1791629172 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.5.2-tuxcare.2...
CLSA-2026-1791629015 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.5.3-tuxcare.2...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Cross-Site Scripting.
Summary postcss is used by IBM Storage Fusion Data Foundation, which could cause Cross-Site Scripting. CVE-2026-41305. Vulnerability Details CVEID:CVE-2026-41305 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract...
CLEANSTART-2026-BO15897 PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it
Security vulnerability affects the apache-superset package. PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it...
CLEANSTART-2026-SY59629 PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree
Security vulnerability affects the langfuse-worker package. PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree...
CLEANSTART-2026-ZC15270 PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it
Security vulnerability affects the npm package. PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it...