| Package | Affected versions | Patched versions |
|---|---|---|
| postcss | ≥ 7.0.0, < 7.0.36≥ 8.0.0, < 8.2.10 | 7.0.368.2.10 |
| postcss | ≥ 7.0.0, < 7.0.36≥ 8.0.0, < 8.2.10 | 7.0.368.2.10 |
The npm package postcss from 7.0.0 and before versions 7.0.36 and 8.2.10 is vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free