Lucene search
+L

808 matches found

vulnersOsv
vulnersOsv
added 2026/03/04 10:59 p.m.10 views

org.webjars.npm:cssnano (=5.1.14), org.webjars.npm:cssnano-preset-default (=5.2.13) +2 more potentially affected by CVE-2026-29074 via org.webjars.npm:svgo (=2.8.0)

org.webjars.npm:svgo MAVEN version =2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:svgo and may be impacted: - org.webjars.npm:cssnano =5.1.14 - org.webjars.npm:cssnano-preset-default =5.2.13 - org.webjars.npm:esbuild-plugin-svg...

7.5CVSS7.1AI score0.00612EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/17 10:29 a.m.16 views

Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Improper Input Validation due to postcss

Summary postcss is used by IBM watsonx Orchestrate Developer Edition as part of wxo-chat Vulnerability Details CVEID:CVE-2023-44270 DESCRIPTION: An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepa...

5.3CVSS6.5AI score0.00822EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/12 3:25 p.m.14 views

Security Bulletin: Vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookie might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookier. Vulnerabilities include an attacker is able to brute force something that was supposed to be random, ...

9.8CVSS7.5AI score0.02542EPSS
SaveExploits6Affected Software1
EUVD
EUVD
added 2025/11/13 3:23 a.m.3 views

EUVD-2025-176921

Malicious code in publish-postcss-loader-achernar-hermes npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-180182

Malicious code in await-supercluster-prosthetics-postcss-loader npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.5 views

EUVD-2025-178480

Malicious code in hydra-markdown-pdf-resolvers-postcss npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-178041

Malicious code in local-terser-postcss-loader-eventhoriz npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-177090

Malicious code in postcss-mongodb-astrometry-eslint-config npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-177873

Malicious code in metalsmith-postcss-loader-magellan-test npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-177843

Malicious code in middleware-exec-callisto-postcss-loader npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/13 3:23 a.m.10 views

Malicious code in miranda-postcss-blitz-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea79ab04fc3a6ac4cbf5514fff31c3ed5fba441933ff5d9a861ea695d6fed4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-177641

Malicious code in nestjs-postcss-loader-slides-spinner npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-177776

Malicious code in mongodb-augmentedreality-mineralogy-postcss npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.3 views

EUVD-2025-179276

Malicious code in dorado-hexo-sqlite-postcss-loader npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-177097

Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.10 views

EUVD-2025-177098

Malicious code in postcss-html-webpack-plugin-enif-ultra npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.5 views

EUVD-2025-176850

Malicious code in quark-postcss-soap-nova npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/13 3:23 a.m.11 views

Malicious code in postcss-development-cosmogenic-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f482ac6e62892d5ceda6f97905d2b05160346c3470ce98335fb68ac7972e391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/13 3:23 a.m.7 views

Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3531082acc33005105cb670ecb9ad95d910561eb968cd85dccd4a71b29b32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.5 views

EUVD-2025-178815

Malicious code in fusion-postcss-loader-supercluster-biohacking npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder