rhsa-2026:68750 – PostCSS and fast-uri vulnerabilities

The source describes one PostCSS vulnerability and six fast-uri vulnerabilities. In PostCSS, a specially crafted sourceMappingURL value can enable path traversal and disclosure of sensitive sourcesContent from arbitrary .map files accessible on the system. The fast-uri vulnerabilities can cause URI host confusion, server-side request forgery (SSRF), security-policy bypasses, access to unauthorized resources, and information disclosure.