Postcss

If you’re using PostCSS before version 8.4.31—especially as part of a linter or similar tool—there’s a subtle vulnerability (CVE-2023-44270)