808 matches found
org.webjars.npm:cssnano (=5.1.14), org.webjars.npm:cssnano-preset-default (=5.2.13) +2 more potentially affected by CVE-2026-29074 via org.webjars.npm:svgo (=2.8.0)
org.webjars.npm:svgo MAVEN version =2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:svgo and may be impacted: - org.webjars.npm:cssnano =5.1.14 - org.webjars.npm:cssnano-preset-default =5.2.13 - org.webjars.npm:esbuild-plugin-svg...
Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Improper Input Validation due to postcss
Summary postcss is used by IBM watsonx Orchestrate Developer Edition as part of wxo-chat Vulnerability Details CVEID:CVE-2023-44270 DESCRIPTION: An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepa...
Security Bulletin: Vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookie might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookier. Vulnerabilities include an attacker is able to brute force something that was supposed to be random, ...
EUVD-2025-176921
Malicious code in publish-postcss-loader-achernar-hermes npm...
EUVD-2025-180182
Malicious code in await-supercluster-prosthetics-postcss-loader npm...
EUVD-2025-178480
Malicious code in hydra-markdown-pdf-resolvers-postcss npm...
EUVD-2025-178041
Malicious code in local-terser-postcss-loader-eventhoriz npm...
EUVD-2025-177090
Malicious code in postcss-mongodb-astrometry-eslint-config npm...
EUVD-2025-177873
Malicious code in metalsmith-postcss-loader-magellan-test npm...
EUVD-2025-177843
Malicious code in middleware-exec-callisto-postcss-loader npm...
Malicious code in miranda-postcss-blitz-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea79ab04fc3a6ac4cbf5514fff31c3ed5fba441933ff5d9a861ea695d6fed4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177641
Malicious code in nestjs-postcss-loader-slides-spinner npm...
EUVD-2025-177776
Malicious code in mongodb-augmentedreality-mineralogy-postcss npm...
EUVD-2025-179276
Malicious code in dorado-hexo-sqlite-postcss-loader npm...
EUVD-2025-177097
Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv npm...
EUVD-2025-177098
Malicious code in postcss-html-webpack-plugin-enif-ultra npm...
EUVD-2025-176850
Malicious code in quark-postcss-soap-nova npm...
Malicious code in postcss-development-cosmogenic-mongodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f482ac6e62892d5ceda6f97905d2b05160346c3470ce98335fb68ac7972e391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3531082acc33005105cb670ecb9ad95d910561eb968cd85dccd4a71b29b32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...