[ Vendor · 1 CVEs ]
postcss
CVEs affecting postcss published in the last 30 days, plus any postcss CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104844 | 2 Oct 2026 | CVSS 5.9 | PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustionPostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, src/parser.js splitWord() can… | Fix |