Asymmetric denial of service In node-postcss
Description
Regular Expression Denial of Service in postcss
The npm package postcss from 7.0.0 and before versions 7.0.36 and 8.2.10 is vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 8.2.1+~cs5.3.23-6 | ||
 npm | 7.0.36, 8.2.10 | ||
debian 12 | 8.2.1+~cs5.3.23-6 | ||
debian 11 | 8.2.1+~cs5.3.23-6 | ||
debian 13 | 8.2.1+~cs5.3.23-6 |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2. 3. 4. 5. 6. 7. 8. 9.