mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-26 17:47:58 +02:00
850 B
850 B
CVE-2021-23368
Description
The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.
POC
Reference
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244795
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244795
- https://snyk.io/vuln/SNYK-JS-POSTCSS-1090595
- https://snyk.io/vuln/SNYK-JS-POSTCSS-1090595