Unrated
The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.
CVE-2021-23368
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-23368 node-postcss Fixed in: 8.2.1+~cs5.3.23-6
Original description The description as published by the source.
The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- patch github.com
- patch github.com
- patch snyk.io
- patch snyk.io
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org