Teire
Changes
Scan
Docs
Trust
← All changes
postcss (npm) · Teire
Changes
Scan
Docs
Trust
Sign in
Worker running
postcss
npm
latest
8.5.32
· 2026-10-26
www.npmjs.com · all 296 versions
Security advisories
6
postcss: Regular Expression Denial of Service in postcss
fixed in 8.2.13, 7.0.36
postcss: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
fixed in 8.5.12
postcss: PostCSS line return parsing error
fixed in 8.4.31
postcss: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
fixed in 8.5.23
Versions that change something
7.0.36
2021-06
fixes 1 advisory
8.2.13
2021-04
fixes 1 advisory
8.4.31
2023-09
fixes 1 advisory
8.5.10
2026-04
fixes 1 advisory
postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
fixed in 8.5.10
postcss: PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
fixed in 8.5.18
8.5.12
2026-04
fixes 1 advisory
8.5.18
2026-07
fixes 1 advisory
8.5.23
2026-07
fixes 1 advisory