update postcss to patched version

postcss / autoprefixer

Parse CSS and add vendor prefixes to rules by Can I Use

https://twitter.com/autoprefixer

MIT License

21.58k stars 1.25k forks source link

update postcss to patched version #1408

Closed aliciapaz closed 3 years ago

aliciapaz commented 3 years ago

postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing, as stated in this advisory: https://www.npmjs.com/advisories/1693 This PR seeks to update the postcss package to a patched version.

ai commented 3 years ago

I also updated yarn.lock: 60ae9a6