1274 matches found
CVE-2021-23382 Regular Expression Denial of Service (ReDoS)
The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern /\s sourceMappingURL=...
CVE-2021-23382
CVE-2021-23382 : IBM Storage Defender Copy Data Management (2.2.0.0–2.2.27.0) includes PostCSS vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The issue stems from vulnerable regex patterns (notably /*\s sourceMappingU...
CVE-2021-23382
The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern /\s sourceMappingURL=...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02-infrastructure (1.0.0) +37562 more potentially affected by CVE-2021-23382 via postcss (>=0.1.0, <=7.0.35)
postcss NPM version =0.1.0, =1.0.1, =1.0.0, =1.0.4, =1.0.0, =5.0.0, =1.0.3, =1.0.7 and more Source cves: CVE-2021-23382 Source advisory: MEND:CVE-2021-23382...
@100mslive/hms-video-react (>=0.3.27, <=0.3.125), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +539 more potentially affected by CVE-2021-23382 via postcss (>=8.0.0, <=8.2.12)
postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =12.0.0-rc.0 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 - @babytian/openinula-repl-next...
CVE-2021-23382
The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern /\s sourceMappingURL=...
CVE-2021-23382
The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern /\s sourceMappingURL=...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9365 more potentially affected by CVE-2021-23382 via postcss (>=7.0.0, <=7.0.35)
postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23382 Source advisory: SNYK:JS-POSTCSS-1255640...
@100mslive/hms-video-react (>=0.3.27, <=0.3.125), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +539 more potentially affected by CVE-2021-23382 via postcss (>=8.0.0, <=8.2.12)
postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =12.0.0-rc.0 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 - @babytian/openinula-repl-next...
Regular Expression Denial of Service (ReDoS)
Overview postcss is a PostCSS is a tool for transforming styles with JS plugins. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-patte...
PostCSS security vulnerabilities
Andrey Sitnik postcss is an open source application by Andrey Sitnik . Tool for converting styles using JS plug-ins . postcss 8.2.13 version before a security vulnerability , the vulnerability stems from vulnerability to regular expression denial-of-service attacks , vulnerable regular expression...
CVE-2021-23382: Inefficient Regular Expression Complexity
The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern /\s sourceMappingURL=...
PT-2021-15478
Name of the Vulnerable Software and Affected Versions postcss versions prior to 7.0.36 postcss versions 8.0.0 through 8.2.13 Description The issue is related to Regular Expression Denial of Service ReDoS via the getAnnotationURL and loadAnnotation functions in lib/previous-map.js. The vulnerable...
Regular Expression Denial Of Service (ReDoS)
postcss is vulnerable to regular expression denial of service. The usage of an insecure regular expression in source map parsing allows an attacker to cause a denial of service condition using a URL...
Unspecified vulnerability in Andrey Sitnik postcss
Andrey Sitnik postcss is an open source application by Andrey Sitnik . Used to use the JS plugin to convert the style of the tool . Andrey Sitnik postcss version 7.0.0 and 8.2.10 before a security vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2021-23368
A regular expression denial of service ReDoS vulnerability was found in the npm library postcss. When parsing a supplied CSS string, if it contains an unexpected value then as the supplied CSS grows in length it will take an ever increasing amount of time to process. An attacker can use this...
CVE-2021-23368
The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...
DEBIAN-CVE-2021-23368
The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...
