Search: CVE-2026-45623

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.6%	CVE-2026-45623Node postcss · PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree Critical9.1EPSS 0.6%2026-07-27GCVE DatabaseCVE-2026-45623 A vulnerability in node-postcss versions 8.5.11 and earlier allows attackers controlling CSS input to cause the host process to read arbitrary local files due to improper validation of sourceMappingURL comments. This can leak file contents via JSON.parse error messages and be used as a file-existence oracle or cause denial of service. The issue is fixed in version 8.5.12. Red Hat Satellite users are advised to update accordingly. EPSS 0.6%Vulnerability CWE-22	GCVE Database	2026-07-27

Page 1 of 1