CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2021/04/26 4:15 p.m.•20 views

CVE-2021-23382

The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern /\s sourceMappingURL=...

7.5CVSS6.6AI score

Exploits0References3

OSV•added 2021/04/26 4:15 p.m.•1 views

DEBIAN-CVE-2021-23382

7.5CVSS6.6AI score0.00074EPSS

Exploits1References1

UbuntuCve•added 2021/04/26 4:15 p.m.•27 views

CVE-2021-23382

7.5CVSS7.1AI score0.00074EPSS

Exploits1References5

Snyk•added 2021/04/26 3:9 p.m.•2 views

Regular Expression Denial of Service (ReDoS)

Overview postcss is a PostCSS is a tool for transforming styles with JS plugins. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-patte...

7.5CVSS9.4AI score0.00074EPSS

Exploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by