Medium DLA-4003-1 3 CVEs

node-postcss - security update

Published Dec 26, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	node-postcss	8.2.1+~cs5.3.23-8+deb11u1

Vulnerabilities 3

Medium 5.3

CVE-2023-44270

PostCSS line return parsing error

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by Po…

node-postcss node-postcss postcss Debian Ubuntu npm

Sep 29, 2023
Medium 4.3

CVE-2024-55565

Predictable results in nanoid generation when given non-integer values

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

katib-suggestion-hyperopt katib-earlystopping katib-suggestion-optuna-enas katib-suggestion-skopt-enas Debian Ubuntu Wolfi npm

Dec 9, 2024
Medium 4.0

CVE-2021-23566

Information Exposure

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

node-postcss node-postcss node-mocha nanoid Debian Ubuntu npm

Jan 14, 2022