CVE-2026-69153

Microsoft · Published August 7, 2026

5.3

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset. PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

Affected Products

azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N