Vulnetix
Try Vulnetix Request Demo
CVE-2021-23382 PUBLISHED

The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern \/\*\s* sourceMappingURL=(.*).

EPSS 0.07% · 21.5th percentile

Risk Scores

EPSS Score
0.07%
21.5th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSnode-postcss0, 6.0.23-1, 6.0.23-3
Ubuntu:22.04:LTSnode-postcss0, 8.2.1+~cs5.3.23-8, 8.4.5+~cs7.1.51-2

Timeline

References

Open in Interactive Console →