Vulnerabilities > CVE-2021-23382 - Unspecified vulnerability in Postcss

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
postcss
NVD
Published: 2021-04-26
Updated: 2024-11-21

Summary

The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern \/\*\s* sourceMappingURL=(.*).

Vulnerable Configurations

Part Description Count
Application
Postcss
193

References