Security vulnerabilities and automated fixes for css issues
1 post found
A high-severity vulnerability in PostCSS (CVE-2026-45623) allowed attackers to craft malicious CSS input containing a manipulated `sourceMappingURL` comment to trigger arbitrary file reads and information disclosure. The vulnerability affected `AdminPanel-Vue/package-lock.json` via the `postcss` dependency pinned at version `8.5.8`, and was resolved by upgrading to `8.5.12` with an explicit `overrides` entry in `package.json` to enforce the safe version across the entire dependency tree.