CVE-2021-23382: Inefficient Regular Expression Complexity

The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service ReDoS via getAnnotationURL and loadAnnotation in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern /\s sourceMappingURL=...

Regular Expression Denial Of Service (ReDoS)

postcss is vulnerable to regular expression denial of service. The usage of an insecure regular expression in source map parsing allows an attacker to cause a denial of service condition using a URL...

Unspecified vulnerability in Andrey Sitnik postcss

Andrey Sitnik postcss is an open source application by Andrey Sitnik . Used to use the JS plugin to convert the style of the tool . Andrey Sitnik postcss version 7.0.0 and 8.2.10 before a security vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2021-23368

A regular expression denial of service ReDoS vulnerability was found in the npm library postcss. When parsing a supplied CSS string, if it contains an unexpected value then as the supplied CSS grows in length it will take an ever increasing amount of time to process. An attacker can use this...

DEBIAN-CVE-2021-23368

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

CVE-2021-23368

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

CVE-2021-23368

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

CVE-2021-23368

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

UBUNTU-CVE-2021-23368

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

Code injection

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

CVE-2021-23368

CVE-2021-23368 concerns the PostCSS package: versions 7.0.0 up to, but not including, 8.2.10 are vulnerable to a Regular Expression Denial of Service (ReDoS) during source map parsing. The connected documents confirm this vulnerability and link it to the Node.js/npm ecosystem, but do not provide ...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9361 more potentially affected by CVE-2021-23368 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23368 Source advisory: MEND:CVE-2021-23368...

@100mslive/hms-video-react (>=0.3.27, <=0.3.59), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +519 more potentially affected by CVE-2021-23368 via postcss (>=8.0.0, <=8.2.9)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =0.1200.0-next.8 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 -...

CVE-2021-23368 Regular Expression Denial of Service (ReDoS)

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

CVE-2021-23368

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

CVE-2021-23368

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

PT-2021-3187

Name of the Vulnerable Software and Affected Versions postcss versions 7.0.0 through 8.2.10 Description The issue is related to a Regular Expression Denial of Service ReDoS during source map parsing, which can lead to uncontrolled resource consumption. This could allow a remote attacker to cause ...

CVE-2021-23368: Undefined Security Weakness

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service ReDoS during source map parsing...

Andrey Sitnik postcss security vulnerability

Andrey Sitnik postcss is an open source application by Andrey Sitnik . Used to use the JS plugin to convert the style of the tool . Andrey Sitnik postcss version 7.0.0 and 8.2.10 before a security vulnerability that can be exploited by attackers to cause a denial of service...

@100mslive/hms-video-react (>=0.3.27, <=0.3.59), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +519 more potentially affected by CVE-2021-23368 via postcss (>=8.0.0, <=8.2.9)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =0.1200.0-next.8 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 -...