CVE-2021-23368

Published April 12th, 2021

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.

postcss/postcss

Transforming styles with JS plugins

GitHub

29K