Vendor
Postcss
8 known vulnerabilities in products by Postcss, 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2021-23368 | Regular Expression Denial of Service (ReDoS) | 5.3 | |
| High | CVE-2021-23382 | Regular Expression Denial of Service (ReDoS) | 5.3 | |
| High | CVE-2026-45623 | PostCSS: Path Traversal | 7.5 | |
| High | CVE-2026-73646 | PostCSS: Path Traversal | 7.5 | |
| Medium | CVE-2026-104844 | PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion | 5.9 | |
| Medium | CVE-2026-69153 | PostCSS: Path Traversal | 5.3 | |
| Medium | CVE-2023-44270 | PostCSS: security vulnerability | 5.3 | |
| Medium | CVE-2026-41305 | PostCSS has XSS via Unescaped </style> in its CSS Stringify Output | 6.1 |
Products
| PostCSS | 7 | 0 |