Aller au contenu
Se connecter
5.3 Moyenne

CVE-2021-23382 The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via…

Description

The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern \/\*\s* sourceMappingURL=(.*).

Produits et versions touchés

Produit Versions touchées Corrigé en
postcss 8.2 premières → < 8.2.13 8.2.13

Autres CVE de postcss

Les 3 CVE de postcss →
CVE-2026-9358 A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2 5.3 Moyenne CVE-2021-23368 The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during… 5.3 Moyenne
Suivre cette CVE