postcss: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments (high). GHSA-6g55-p6wh-862q, CVE-2026-45623.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?