search

postcss / autoprefixer

Parse CSS and add vendor prefixes to rules by Can I Use
https://twitter.com/autoprefixer
MIT License
21.57k stars 1.25k forks source link

Update postcss dependency version #1467

Closed nemphys closed 1 year ago

nemphys commented 1 year ago

postcss <7.0.36 Severity: moderate Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5

ai commented 1 year ago

The latest Autoprefixer uses PostCSS 8.

Seems like you have very old Autoprefixer.

Update your dependencies.

if you still have issue call npm ls to find who lock old Autoprefixer and PostCSS.

nemphys commented 1 year ago

Right, wrong repo (I was aiming for postcss-prefixer), sorry.