Lucene search
AnonymousNODEJS:1693HistoryMay 10, 2021 - 3:38 p.m.
Regular Expression Denial of Service
2021-05-1015:38:31
Anonymous
www.npmjs.com
79
0.005 Low
EPSS
Percentile
76.3%
Overview
postcss from 7.0.0 and before version 7.0.36 and 8.2.10 is vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.
Recommendation
Upgrade to version 8.2.10 or later
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| postcss | ge | 7.0.0 <7.0.36 || >=8.0.0 <8.2.10 |
Related
openvas
openvas
OTRS ReDoS Vulnerability (OSA-2021-19)
2021-10-18 00:00:00
OTRS Multiple Vulnerabilities (OSA-2022-04)
2022-10-19 00:00:00
debiancve
debiancve
CVE-2021-23368
2021-04-12 14:15:14
redhatcve
redhatcve
CVE-2021-23368
2021-04-12 21:16:01
nessus
nessus
RHEL 8 : nodejs-postcss (Unpatched Vulnerability)
2024-05-11 00:00:00
Splunk Enterprise < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0613)
2024-05-02 00:00:00
cvelist
cvelist
CVE-2021-23368 Regular Expression Denial of Service (ReDoS)
2021-04-12 00:00:00
ubuntucve
ubuntucve
CVE-2021-23368
2021-04-12 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-04-13 06:56:17
prion
prion
Code injection
2021-04-12 14:15:00
osv
osv
CVE-2021-23368
2021-04-12 14:15:14
Regular Expression Denial of Service in postcss
2021-05-10 15:29:24
cve
cve
CVE-2021-23368
2021-04-12 14:15:14
nvd
nvd
CVE-2021-23368
2021-04-12 14:15:14
github
github
Regular Expression Denial of Service in postcss
2021-05-10 15:29:24
ibm
ibm
redhat
redhat