Security vulnerabilities and automated fixes for source map js issues
1 post found
The project's frontend toolchain resolved `source-map-js` 1.2.1, which is affected by CVE-2026-93749. Under that CVE, a malformed *indexed* source map (one built from a `sections` array) can cause a denial of service. The fix adds a pnpm `overrides` entry that forces every consumer in the tree, including PostCSS and `@tailwindcss/node`, onto `source-map-js` 1.2.2.