CVE-2026-45623 PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-45623

PostCSS vulnerability CVE-2026-45623 affects versions up to 8.5.11. The PreviousMap parses the /*# sourceMappingURL=PATH */ comment from CSS, dereferencing PATH against the local filesystem without scheme, allowlist, or traversal checks. An attacker-controlled CSS input can cause the host process...

CVE-2026-45623 PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...

CVE-2026-55953

creationtimestamp| type| source ---|---|--- 2026-07-27 17:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnfd5zneb2q 2026-07-28 17:22:25+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-2...

CVE-2026-13714

creationtimestamp| type| source ---|---|--- 2026-07-27 17:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf7ldukf2r 2026-08-02 23:18:17+00:00| published-proof-of-concept| Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U 2026-08-03 00:26:59+00:00|...

CVE-2026-16280

creationtimestamp| type| source ---|---|--- 2026-07-27 17:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnf3ynxg322...

CVE-2026-66391

creationtimestamp| type| source ---|---|--- 2026-07-27 16:58:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrnelnpg2m24...

GHSA-GV7G-JM28-CR3M

creationtimestamp| type| source ---|---|--- 2026-07-27 16:55:41+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrnefsqhi72u 2026-07-28 21:00:04+00:00| seen| https://t.me/truesecator/8452 2026-07-29 00:00:12+00:00| seen| https://t.me/truesecator/8452 2026-07-29 01:00:04+00:00| seen|...

CVE-2026-66390

creationtimestamp| type| source ---|---|--- 2026-07-27 16:48:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrndzrqhm622...

MAL-2026-11093 Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...

DEBIAN-CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

CVE-2026-59550

creationtimestamp| type| source ---|---|--- 2026-07-27 16:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbxujvm524 2026-08-12 14:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msvcxdahlj2i...

CVE-2026-59538

creationtimestamp| type| source ---|---|--- 2026-07-27 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbudcvfy2u 2026-08-12 12:16:25+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msv4b7hthz2w...

CVE-2026-59533

creationtimestamp| type| source ---|---|--- 2026-07-27 16:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbuc2vtl23 2026-08-14 07:16:24+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mszmgkwzhs23...

CVE-2026-59527

creationtimestamp| type| source ---|---|--- 2026-07-27 16:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbqqrma52q 2026-08-11 13:16:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mssp53f5fd26...

CVE-2026-59549

creationtimestamp| type| source ---|---|--- 2026-07-27 16:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbqpcu7s22 2026-08-12 19:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msvtppnvsb2g...

CVE-2026-13597

creationtimestamp| type| source ---|---|--- 2026-07-27 16:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbjklh6g24...

GHSA-RCQ7-RV5G-J3R4

creationtimestamp| type| source ---|---|--- 2026-07-27 16:00:06+00:00| seen| https://t.me/bdufstecru/3344 2026-07-28 00:00:31+00:00| published-proof-of-concept| https://t.me/bdufstecru/3344...

CVE-2018-20069

creationtimestamp| type| source ---|---|--- 2026-07-27 16:00:06+00:00| seen| Telegram/PlEDevcuWPPtzjArcIPyILhiwFhpiDeIbj6tiQGfa2QAIgw 2026-07-28 00:00:32+00:00| published-proof-of-concept| Telegram/PlEDevcuWPPtzjArcIPyILhiwFhpiDeIbj6tiQGfa2QAIgw...

CVE-2019-16865

creationtimestamp| type| source ---|---|--- 2026-07-27 16:00:06+00:00| seen| Telegram/PlEDevcuWPPtzjArcIPyILhiwFhpiDeIbj6tiQGfa2QAIgw 2026-07-28 00:00:32+00:00| published-proof-of-concept| Telegram/PlEDevcuWPPtzjArcIPyILhiwFhpiDeIbj6tiQGfa2QAIgw...