1102 matches found
Malicious Package
Overview dagda-repository-postcss-loader-wolf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
File Inclusion at postcss Dependency in Bamboo Data Center
This High severity File Inclusion vulnerability was introduced in versions 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This File Inclusion vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an unauthenticated...
CLSA-2026-1788375461 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.41-tuxcare.4...
CLSA-2026-1788375457 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.31-tuxcare.3...
CLSA-2026-1788373419 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.14-tuxcare.4...
CLSA-2026-1788373352 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.5-tuxcare.3...
File Inclusion postcss Dependency in Jira Software Data Center
This High severity File Inclusion vulnerability was introduced in versions 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This File Inclusion vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
File Inclusion postcss Dependency in Jira Service Management Data Center
This High severity File Inclusion vulnerability was introduced in versions 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This File Inclusion vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
CLSA-2026-1788354808 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.2.15-tuxcare.3...
Malicious Package
Overview bellatrix-bulma-postcss-deimos is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
PT-2026-90768
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.31-tuxcare.3...
PT-2026-90767
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.14-tuxcare.4...
PT-2026-90769
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.41-tuxcare.4...
PT-2026-90696
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.2.15-tuxcare.3...
PT-2026-90766
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.5-tuxcare.3...
Security Bulletin: IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-45623
Summary IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-45623. This bulletin contains information regarding addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-45623 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify...
Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses ansible_core-2.19.11, postcss-8.5.10 and dompurify-3.4.11 which are vulnerable to CVE-2026-16493, CVE-2026-45623, CVE-2026-69153 and CVE-2026-66010
Summary IBM Maximo Application Suite - Cluster Performance Insights uses ansiblecore-2.19.11, postcss-8.5.10 and dompurify-3.4.11 which are vulnerable to CVE-2026-16493, CVE-2026-45623, CVE-2026-69153 and CVE-2026-66010. This bulletin contains information regarding these vulnerabilities and their...
ROOT-APP-NPM-CVE-2023-44270 CVE-2023-44270 in postcss - Patched by Root
Root has patched CVE-2023-44270 in the postcss package for Root:npm. Multiple fixed versions available...