{"api_version":"v1","generated_at":"2026-10-08T03:25:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-publisher-not-identified-postcss-ee001e5eb312","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/postcss","name":"postcss","next_cursor":null,"observations":[{"affected":"unspecified < 8.2.13","affected_versions_present":true,"cve_id":"CVE-2021-23382","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-23382","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-16T23:26:53.744Z","patch_url":"https://snyk.io/vuln/SNYK-JS-POSTCSS-1255640","primary_source":"","published":"2021-04-26T15:30:26.301Z"},{"affected":"7.0.0 < unspecified; unspecified < 8.2.10","affected_versions_present":true,"cve_id":"CVE-2021-23368","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-23368","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-16T17:27:47.659Z","patch_url":"https://snyk.io/vuln/SNYK-JS-POSTCSS-1090595","primary_source":"","published":"2021-04-12T13:50:14.764Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"Publisher not identified"}}