Update the postcss from 8.4.5 to 8.4.6
Because the nanoid used in postcss@8.4.5 is vulnerable to Information Disclosure. Due to a weakness in the fillPool() function in index.js, a local attacker can leverage the JavaScript valueOf() function to reproduce the last ID generated. Depending on how the application uses these unique IDs, the attacker could use this information to access other sensitive data.
Update the postcss from 8.4.5 to 8.4.6
Because the nanoid used in postcss@8.4.5 is vulnerable to Information Disclosure. Due to a weakness in the fillPool() function in index.js, a local attacker can leverage the JavaScript valueOf() function to reproduce the last ID generated. Depending on how the application uses these unique IDs, the attacker could use this information to access other sensitive data.