CVE-2026-45623 PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-45623 PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

EUVD-2026-49376

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-45623

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-55953

creationtimestamp| type| source ---|---|--- 2026-07-27 17:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnfd5zneb2q 2026-07-28 17:22:25+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-2...

CVE-2026-13714

creationtimestamp| type| source ---|---|--- 2026-07-27 17:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf7ldukf2r 2026-08-02 23:18:17+00:00| published-proof-of-concept| Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U 2026-08-03 00:26:59+00:00|...

CVE-2026-16280

creationtimestamp| type| source ---|---|--- 2026-07-27 17:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf3ynxg322...

CVE-2026-66391

creationtimestamp| type| source ---|---|--- 2026-07-27 16:58:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrnelnpg2m24...

GHSA-GV7G-JM28-CR3M

creationtimestamp| type| source ---|---|--- 2026-07-27 16:55:41+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrnefsqhi72u 2026-07-28 21:00:04+00:00| seen| https://t.me/truesecator/8452 2026-07-29 00:00:12+00:00| seen| https://t.me/truesecator/8452 2026-07-29 01:00:04+00:00| seen|...

CVE-2026-66390

creationtimestamp| type| source ---|---|--- 2026-07-27 16:48:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrndzrqhm622...

MAL-2026-11093 Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...

DEBIAN-CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

akto v2.15.0

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

CVE-2026-59550

creationtimestamp| type| source ---|---|--- 2026-07-27 16:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbxujvm524 2026-08-12 14:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msvcxdahlj2i 2026-09-18 04:00:13+00:00| seen|...

CVE-2026-59538

creationtimestamp| type| source ---|---|--- 2026-07-27 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbudcvfy2u 2026-08-12 12:16:25+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msv4b7hthz2w...

CVE-2026-59533

creationtimestamp| type| source ---|---|--- 2026-07-27 16:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbuc2vtl23 2026-08-14 07:16:24+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mszmgkwzhs23...

CVE-2026-59527

creationtimestamp| type| source ---|---|--- 2026-07-27 16:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbqqrma52q 2026-08-11 13:16:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mssp53f5fd26...

CVE-2026-59549

creationtimestamp| type| source ---|---|--- 2026-07-27 16:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbqpcu7s22 2026-08-12 19:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msvtppnvsb2g...

CVE-2026-13597

creationtimestamp| type| source ---|---|--- 2026-07-27 16:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbjklh6g24...

CVE-2019-16865

creationtimestamp| type| source ---|---|--- 2026-07-27 16:00:06+00:00| seen| Telegram/PlEDevcuWPPtzjArcIPyILhiwFhpiDeIbj6tiQGfa2QAIgw 2026-07-28 00:00:32+00:00| published-proof-of-concept| Telegram/PlEDevcuWPPtzjArcIPyILhiwFhpiDeIbj6tiQGfa2QAIgw...