Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tailwindlabs/tailwindcss

              main @ d5ca0ae
            

Fixes

CVEs

HIGH

Peak severity

54.5%

Coverage

Highlights

Denial of Service: 9 prior fixes. Scrutinize any change in this area.

@tailwindcss/cli: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Arbitrary Code Execution: Arbitrary variants that contain multiple selectors could bypass core structural restrictions and allow for CSS injection or breakouts, leading to potential security boundaries being crossed during rule generation.

Injection: Allowing top-level braces and semicolons inside arbitrary utility values opens up paths for direct CSS and style injections, altering the compiled output unexpectedly.

Denial of Service: The CLI can hang indefinitely or crash when reading from or writing to unsupported special character devices, pipes, or when attempting to monitor deleted files.