postcss
postcss 8.5.28 · pkgs/by-name/po/postcss/package.nix
Health
Risk
risk 29 medium
- +15 2 open advisories
- +8 NIXPKGS-2026-1258 has a public exploit (CISA)
- +6 no maintainer
Version
8.5.28 no newer release known to repology
Channels
Hydra
succeeded 1d ago
Advisories
NIXPKGS-2026-2346 EPSS 0.5% PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset · #549107
CVE-2026-69153
Packaging
not read yet: the next index sweep reads it
Maintainers
none
Pull requests 1
postcss: 8.5.28 -> 8.5.30
#570532 by r-ryantm · opened 11d ago · checks pass
Closed or merged in the synced window 2
postcss: 8.5.26 -> 8.5.28
#559715 by r-ryantm · merged 6w ago
postcss: 8.5.15 -> 8.5.26
#543496 by r-ryantm · merged 8w ago
Issues 1
PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset 1.severity: security
#549107 by nixpkgs-security-tracker · opened 2mo ago · 0 comments