CLEANSTART-2026-XM40960 source-map-js through 1

Security vulnerability affects the n8n package. source-map-js through 1...

PT-2026-117912

Security vulnerability affects the n8n package. source-map-js through 1...

CLEANSTART-2026-VU21760 source-map-js through 1

Security vulnerability affects the langfuse-worker package. source-map-js through 1...

postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

A flaw was found in PostCSS, a tool that processes CSS files. An attacker who provides specially crafted CSS input containing a malicious source map comment can cause the system to read arbitrary files from the local filesystem. This can lead to the disclosure of sensitive information, specifical...

Security Bulletin: IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153.

Summary IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-69153 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and...

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...

SUSE CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

A flaw was found in source-map-js. This vulnerability allows a remote attacker to trigger a denial of service by providing malformed input. Specifically, by supplying extremely large offset line values in indexed source maps, the attacker can cause the service's event loop to block, making it...

Linux Distros Unpatched Vulnerability : CVE-2026-93749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values...

@ahmedrowaihi/pdf-forge-assets (>=2.0.0-canary.5, <=2.0.0-canary.6), @ahmedrowaihi/pdf-forge-cli (>=2.0.0-canary.6, <=2.0.0-canary.8) +263 more potentially affected by CVE-2026-93749 via source-map-js (>=1.0.1, <=1.2.1)

source-map-js NPM version =1.0.1, =2.0.0-canary.5, =2.0.0-canary.6, =2.0.0-canary.5, =2.0.0-canary.6, =1.0.0-alpha.0, =1.0.0-alpha.0, =1.0.0-alpha.0, =0.0.2, =4.10.2, =1.1.2, =4.9.2, =1.16.2, =1.2.3, =3.42.3, =3.56.1 and more Source cves: CVE-2026-93749 Source advisory: OSV:GHSA-68FV-2MGG-JV7Q...

@ahmedrowaihi/pdf-forge-assets (>=2.0.0-canary.5, <=2.0.0-canary.6), @ahmedrowaihi/pdf-forge-cli (>=2.0.0-canary.6, <=2.0.0-canary.8) +263 more potentially affected by CVE-2026-93749 via source-map-js (>=1.0.1, <=1.2.1)

source-map-js NPM version =1.0.1, =2.0.0-canary.5, =2.0.0-canary.6, =2.0.0-canary.5, =2.0.0-canary.6, =1.0.0-alpha.0, =1.0.0-alpha.0, =1.0.0-alpha.0, =0.0.2, =4.10.2, =1.1.2, =4.9.2, =1.16.2, =1.2.3, =3.42.3, =3.56.1 and more Source cves: CVE-2026-93749 Source advisory: GHSA-68FV-2MGG-JV7Q...

GHSA-68FV-2MGG-JV7Q source-map-js allows event-loop denial of service through indexed source-map section offsets

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

source-map-js allows event-loop denial of service through indexed source-map section offsets

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

AZL-103478 CVE-2026-93749 affecting package python-tensorboard 2.16.2-6

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

AZL-103442 CVE-2026-93749 affecting package js-jquery 3.5.0-4

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

DEBIAN-CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

UBUNTU-CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...