Lucene search

K
osvGoogleOSV:GHSA-HWJ9-H5MP-3PM3
HistoryMay 10, 2021 - 3:29 p.m.

Regular Expression Denial of Service in postcss

2021-05-1015:29:24
Google
osv.dev
57

0.005 Low

EPSS

Percentile

76.3%

The npm package postcss from 7.0.0 and before versions 7.0.36 and 8.2.10 is vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.

References