postcss-selector-parser vulnerabilities

Products

• postcss-selector-parser 1

Latest postcss-selector-parser CVEs

Newest publication first

1. CVE-2026-9358 postcss-selector-parser AST Serialization container.js toString recursion

   Published 2026-05-24

   Medium·CVSS 5.3

   A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2. Affected is the function toString of the file src/selectors/container.js of the component AST Serialization. Executing a manipulation can lead to uncontrolled recursion. It is possible to launch the atta...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.