Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitHub Actions postcss may let attackers run code
published 1 month ago
Summary
The postcss component used in GitHub Actions could be tricked into executing unwanted code. This risk has been fixed in the updated version 8.5.3-tuxcare.1. Upgrade to that version as soon as possible to stay protected.
What to do
- Update GitHub Actions postcss to version 8.5.3-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | postcss |
< 8.5.3-tuxcare.1 Fix: upgrade to 8.5.3-tuxcare.1
|
Original advisory text
TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.5.3-tuxcare.1.
Timeline
Published23 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
CLSA-2026-1790190302 · OSV
Track software like this
Free during beta