CVE-2021-23382
1 advisory.
npm/postcss CVE-2021-23382: medium 5.3, EPSS 2.56%
Regular Expression Denial of Service in postcss
Action: Upgrade postcss to 7.0.36 or later.
npm i postcss@8.2.13npm i postcss@7.0.36Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.2.13 | - |
| 0 | 7.0.36 | - |
Fixed versions
| 8.2.13 | 7.0.36 |
Sources
- osv: GHSA-566m-qj78-rww5
- https://nvd.nist.gov/vuln/detail/CVE-2021-23382
- https://github.com/postcss/postcss/commit/2b1d04c867995e55124e0a165b7c6622c1735956
- https://github.com/postcss/postcss/releases/tag/7.0.36
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1255641
- https://snyk.io/vuln/SNYK-JS-POSTCSS-1255640
CVE-2021-23382 · published · modified · JSON