Cross-site Scripting (XSS)

🗓️ 24 Apr 2026 04:18:45Reported by Snyk Security DatabaseType

PostCSS is vulnerable to XSS via unescaped </style> in CSS when embedded in HTML style tags.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	19 Jun 202608:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	8 Jun 202607:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses postcss-8.4.49.tgz which is vulnerable to CVE-2026-41305	1 Jun 202608:08	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in postcss-8.4.38.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-41305)	1 Jun 202612:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities	27 May 202615:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in postcss-8.5.5.tgz	7 May 202619:52	–	ibm
IBM Security Bulletins	Security Bulletin: Resolved a vulnerability in PostCSS versions prior to 8.5.10	4 May 202609:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules	22 May 202608:50	–	ibm
ATTACKERKB	CVE-2026-41305	24 Apr 202602:27	–	attackerkb
Chainguard	CVE-2026-41305 vulnerabilities	6 May 202619:18	–	cgr