Commit c2761bf
committed
fix(deps): bump postcss to 8.5.12
Closes GHSA-qx2v-qp2m-jg93 (CVSS 6.1, XSS via unescaped </style> in CSS
stringify output). Build-time only dep; postcss is invoked over our own
CSS, not user input. npm audit reports 0 vulnerabilities after the bump.1 parent 98da666 commit c2761bf
1 file changed
Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments