{"uuid": "981eb45e-2507-40d5-8001-15c8b1046431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69153", "type": "seen", "source": "https://bsky.app/profile/blainehines.bsky.social/post/3msqo56gf5s2o", "content": "We patched \u2060\u202fpostcss\u202f\u2060 to version 8.5.23 to resolve a moderate-severity vulnerability (CVE-2026-69153). An attacker-controlled CSS file could bypass path-traversal guards when the \u2060\u202ffrom\u202f\u2060 option was omitted,  allowing unauthorized read access to arbitrary \u2060\u202f.map\u202f\u2060 files on the build machine.", "creation_timestamp": "2026-08-10T17:53:00.153692Z"}