CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1102 matches found

RedhatCVE•added 2021/04/27 5:16 p.m.•33 views

CVE-2021-23382

A regular expression denial of service ReDoS vulnerability was found in the npm library postcss when using getAnnotationURL or loadAnnotation options in lib/previous-map.js. An attacker can use this vulnerability to potentially craft a malicious CSS to process resulting in a denial of service...

7.5CVSS3.8AI score0.02557EPSS

SaveExploits1References4

Veracode•added 2021/04/27 4:38 a.m.•36 views

Regular Expression Denial Of Service (ReDoS)

postcss is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure usage of regex sub-pattern /\\s sourceMappingURL=. via getAnnotationURL and loadAnnotation in lib/previous-map.js...

7.5CVSS3.7AI score0.02557EPSS

SaveExploits1References1Affected Software2

osv_debian•added 2021/04/26 4:15 p.m.•4 views

DEBIAN-CVE-2021-23382

The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern /\s sourceMappingURL=...

7.5CVSS6.6AI score0.02557EPSS

SaveExploits1References1

NVD•added 2021/04/26 4:15 p.m.•22 views

CVE-2021-23382

7.5CVSS0.02557EPSS

SaveExploits1References3

osv_cve•added 2021/04/26 4:15 p.m.•90 views

CVE-2021-23382

7.5CVSS6.6AI score

SaveExploits0References3

Prion•added 2021/04/26 4:15 p.m.•20 views

Code injection

5CVSS8.3AI score0.02557EPSS

SaveExploits1References3Affected Software1

osv_ubuntu•added 2021/04/26 4:15 p.m.•15 views

UBUNTU-CVE-2021-23382

7.5CVSS7.2AI score0.02557EPSS

SaveExploits1References6

UbuntuCve•added 2021/04/26 4:15 p.m.•53 views

CVE-2021-23382

7.5CVSS7.1AI score0.02557EPSS

SaveExploits1References5

Debian CVE•added 2021/04/26 3:30 p.m.•31 views

CVE-2021-23382

7.5CVSS7.5AI score0.02557EPSS

SaveExploits1

Cvelist•added 2021/04/26 3:30 p.m.•46 views

CVE-2021-23382 Regular Expression Denial of Service (ReDoS)

5.3CVSS7.7AI score0.02557EPSS

SaveExploits1References3

CVE•added 2021/04/26 3:30 p.m.•193 views

CVE-2021-23382

CVE-2021-23382 : IBM Storage Defender Copy Data Management (2.2.0.0–2.2.27.0) includes PostCSS vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The issue stems from vulnerable regex patterns (notably /*\s sourceMappingU...

7.5CVSS6.2AI score0.02557EPSS

SaveExploits1References3Affected Software1

Mend•added 2021/04/26 3:30 p.m.•7 views

CVE-2021-23382

7.5CVSS0.02557EPSS

SaveExploits1References4

vulnersOsv•added 2021/04/26 3:30 p.m.•2 views

@100mslive/hms-video-react (>=0.3.27, <=0.3.125), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +534 more potentially affected by CVE-2021-23382 via postcss (>=8.0.0, <=8.2.12)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =12.0.0-rc.0 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 - @babytian/openinula-repl-next...

7.5CVSS0.02557EPSS

SaveExploits1

vulnersOsv•added 2021/04/26 3:30 p.m.•2 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02-infrastructure (1.0.0) +37537 more potentially affected by CVE-2021-23382 via postcss (>=0.1.0, <=7.0.35)

postcss NPM version =0.1.0, =1.0.1, =1.0.0, =1.0.4, =1.0.0, =5.0.0, =1.0.3, =1.0.7 and more Source cves: CVE-2021-23382 Source advisory: MEND:CVE-2021-23382...

7.5CVSS0.02557EPSS

SaveExploits1

attackerkb•added 2021/04/26 3:23 p.m.•7 views

CVE-2021-23382

7.5CVSS5.4AI score0.02557EPSS

SaveExploits1References4

vulnersOsv•added 2021/04/26 3:09 p.m.•11 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9361 more potentially affected by CVE-2021-23382 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23382 Source advisory: SNYK:JS-POSTCSS-1255640...

7.5CVSS6.7AI score0.02557EPSS

SaveExploits1

vulnersOsv•added 2021/04/26 3:09 p.m.•9 views

@100mslive/hms-video-react (>=0.3.27, <=0.3.125), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +534 more potentially affected by CVE-2021-23382 via postcss (>=8.0.0, <=8.2.12)

7.5CVSS6.6AI score0.02557EPSS

SaveExploits1

Snyk•added 2021/04/26 3:09 p.m.•15 views

Regular Expression Denial of Service (ReDoS)

Overview postcss is a PostCSS is a tool for transforming styles with JS plugins. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-patte...

7.5CVSS9.4AI score0.02557EPSS

SaveExploits1References2

CNNVD•added 2021/04/26 12:00 a.m.•15 views

PostCSS security vulnerabilities

Andrey Sitnik postcss is an open source application by Andrey Sitnik . Tool for converting styles using JS plug-ins . postcss 8.2.13 version before a security vulnerability , the vulnerability stems from vulnerability to regular expression denial-of-service attacks , vulnerable regular expression...

7.5CVSS7.6AI score0.02557EPSS

SaveExploits1References13

Positive Technologies•added 2021/04/26 12:00 a.m.•15 views

PT-2021-15478

Name of the Vulnerable Software and Affected Versions postcss versions prior to 7.0.36 postcss versions 8.0.0 through 8.2.13 Description The issue is related to Regular Expression Denial of Service ReDoS via the getAnnotationURL and loadAnnotation functions in lib/previous-map.js. The vulnerable...

7.5CVSS6.6AI score0.02557EPSS

SaveExploits1References15

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by