Tool for transforming styles with JS plugins
99%
Total Score
100
91
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2026-69153 postcss is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 8.5.22. | 0.0.0 - 8.5.22 | Medium |
CVE-2026-73646 postcss is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 8.5.17. | 0.0.0 - 8.5.17 | High |
CVE-2026-45623 postcss is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 8.5.11. | 0.0.0 - 8.5.11 | High |
CVE-2026-41305 postcss is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 8.5.10. | 0.0.0 - 8.5.10 | Medium |
CVE-2023-44270 postcss is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 0.0.0 - 8.4.31. | 0.0.0 - 8.4.31 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
nanoid Version ^3.3.17 | — | — |
picocolors Version ^1.1.1 | — | — |
source-map-js Version ^1.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant