An open index of dependabot pull requests across open source projects.

postcss

Ecosystem:
npm
Package URL:
pkg:npm/postcss
Total PRs:
23,773 Dependabot PRs
Latest PR:
about 3 hours ago
Unique Repositories:
11,740 repositories
Unique Repos (30 days):
194 repositories
Security Advisories
PostCSS line return parsing error
GHSA-7fh5-64p2-3v2j CVE-2023-44270 MODERATE published almost 3 years ago • updated 2 days ago
An issue was discovered in PostCSS before 8.4.31. It affects linters using PostCSS to parse external Cascading Style Sheets (CSS). There may be `\r...
PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
GHSA-qx2v-qp2m-jg93 CVE-2026-41305 MODERATE published 3 months ago • updated 1 day ago
# PostCSS: XSS via Unescaped `</style>` in CSS Stringify Output ## Summary PostCSS v8.5.5 (latest) does not escape `</style>` sequences when stri...
Regular Expression Denial of Service in postcss
GHSA-hwj9-h5mp-3pm3 CVE-2021-23368 MODERATE published about 5 years ago • updated about 18 hours ago
The npm package `postcss` from 7.0.0 and before versions 7.0.36 and 8.2.10 is vulnerable to Regular Expression Denial of Service (ReDoS) during sou...
Regular Expression Denial of Service in postcss
GHSA-566m-qj78-rww5 CVE-2021-23382 MODERATE published over 4 years ago • updated about 15 hours ago
The package postcss versions before 7.0.36 or between 8.0.0 and 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnota...
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
GHSA-6g55-p6wh-862q CVE-2026-45623 HIGH published about 7 hours ago • updated about 4 hours ago
## Summary PostCSS's `PreviousMap` parses the `/*# sourceMappingURL=PATH */` comment from any CSS string passed to `process()` and dereferences `P...
Recent PRs (filtered by: Minor PRs )
Bump postcss from 8.4.12 to 8.5.16

ejhinde/writer #340

8.4.12 → 8.5.16 Minor PR
Open 14 days ago 1 comment
ejhinde
Bump postcss from 8.4.14 to 8.5.15

sapun4ik/getdoks-test #286

8.4.14 → 8.5.15 Minor PR
Closed about 1 month ago 3 comments
sapun4ik
Bump postcss and expo

Redbaron13/TheLobby-App #47

8.4.49 → 8.5.15 Minor PR
Open about 2 months ago 1 comment
Redbaron13
Package Details
Name: postcss
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/postcss
JSON API: View JSON
Security Advisories

5

Active advisories
HIGH 1
MODERATE 4
View All npm Advisories
Package Information
Description:

Tool for transforming styles with JS plugins

Repository: https://github.com/postcss/postcss
Homepage: https://postcss.org/
Latest Release: 8.5.4
about 1 year ago
Dependent Repos: 3,705,251
Dependent Packages: 38,375
Downloads: 405,275,377
Ranking: Top 0.0034% by dependent repos Top 0.002% by downloads Top 0.0027% by dependent pkgs
PR Status
Open 11,953 (50.3%)
Merged 2,249 (9.5%)
Closed 7,816 (32.9%)
PR Types
Major 633 (2.7%)
Minor 3,938 (16.6%)
Patch 17,421 (73.3%)
Removal 15 (0.1%)