CVE-2026-69153

CVE-2026-69153 (PostCSS) affects PostCSS prior to 8.5.19. If the option from is unset, an attacker can cause PreviousMap.loadFile() to read an unintended source-map file by supplying an absolute or directory-traversal sourceMappingURL, exposing the map’s sources and sourcesContent. The issue is f...

CVE-2026-69153 PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...

CVE-2026-69153 PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...

CVE-2026-69153

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...

CVE-2026-69153 PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...

CVE-2026-69149

creationtimestamp| type| source ---|---|--- 2026-08-03 16:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xhtypny2p 2026-08-03 18:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5nwaq22vg5q3w 2026-08-05 02:26:04+00:00| seen|...

CVE-2026-68945

creationtimestamp| type| source ---|---|--- 2026-08-03 16:32:48+00:00| seen| https://gist.github.com/alon710/73fc02db3c552514344a681ca47f8151 2026-08-03 18:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/76ddsj6kowu3a...

GHSA-JHPW-976M-542J

creationtimestamp| type| source ---|---|--- 2026-08-03 16:32:48+00:00| seen| https://gist.github.com/alon710/73fc02db3c552514344a681ca47f8151...

CVE-2026-12935

creationtimestamp| type| source ---|---|--- 2026-08-03 15:16:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3ms6s522ink2x...

CVE-2026-68587

creationtimestamp| type| source ---|---|--- 2026-08-03 14:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6r3yur7p2b...

CVE-2026-68584

creationtimestamp| type| source ---|---|--- 2026-08-03 14:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6qyg64yp2u...

CVE-2026-18642

creationtimestamp| type| source ---|---|--- 2026-08-03 14:24:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/im4yblmc4tj4t...

CVE-2026-67608

creationtimestamp| type| source ---|---|--- 2026-08-03 14:22:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jmbxd5vat537y...

CVE-2026-64827

creationtimestamp| type| source ---|---|--- 2026-08-03 14:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/355ijrasd4dlj...

CVE-2026-18092

creationtimestamp| type| source ---|---|--- 2026-08-03 14:10:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4tbihl57xlgja...

CVE-2026-18601

creationtimestamp| type| source ---|---|--- 2026-08-03 13:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6n3btsgp2h 2026-08-04 16:00:44+00:00| seen|...

CVE-2026-18574

creationtimestamp| type| source ---|---|--- 2026-08-03 13:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/117031818277568421 2026-08-03 13:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6n3aody32l 2026-08-03 16:15:49+00:00| seen|...

CVE-2026-8793

creationtimestamp| type| source ---|---|--- 2026-08-03 12:50:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ms6jxjcufv2l...

CVE-2026-58062

creationtimestamp| type| source ---|---|--- 2026-08-03 12:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6jtjhgyp2l 2026-08-03 20:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7f7p43zj2p 2026-08-04 09:28:18+00:00| seen|...

CVE-2026-56852

creationtimestamp| type| source ---|---|--- 2026-08-03 12:03:59+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3ms6hejb7hx2j 2026-08-05 22:37:18+00:00| seen| https://gist.github.com/cwayne18/5a965b20d5d77b66faec2e6e18802a48 2026-08-06 00:00:18+00:00| seen|...