Medium
CVE-2026-44429
The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the public catalogue UI served at GET / (file internal/api/handlers/v0/ui_index.ht…
Tag: Tailwind CSS
All CVEs associated with "Tailwind CSS". Page 1/1 • 3 CVEs.
About “Tailwind CSS”
A curated feed of “Tailwind CSS”-related CVEs appears below. We currently track 3 CVEs for this tag (all time). In the last 365 days, 3 were published. Average CVSS is 7.5 (all time; 7.5 over 365d), and 67% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection').
In our taxonomy this topic maps to a LOW impact class. Language runtimes and libraries cascade through dependency graphs. Upgrade runtime and toolchain, pin versions, rebuild images, and enable SAST or DAST and linters. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
Support & lifecycle: tailwind-css
This table shows recent release cycles and their projected end-of-life. Data source: endoflife.date.
| Cycle | Release | Latest | EOL | LTS |
|---|---|---|---|---|
| 4.3 | 4.3.0 | - | ||
| 4.2 | 4.2.4 | Expired | ||
| 4.1 | 4.1.18 | Expired | ||
| 4.0 | 4.0.17 | Expired | ||
| 3.4 | 3.4.19 | |||
| 3.3 | 3.3.7 | Expired | ||
| 3.2 | 3.2.7 | Expired | ||
| 3.1 | 3.1.8 | Expired | ||
| 3.0 | 3.0.24 | Expired | ||
| 2.2 | 2.2.19 | Expired | ||
| 2.1 | 2.1.4 | Expired | ||
| 2.0 | 2.0.5 | Expired | ||
| 1.9 | 1.9.6 | Expired | ||
| 1.8 | 1.8.13 | Expired | ||
| 1.7 | 1.7.6 | Expired | ||
| 1.6 | 1.6.3 | Expired | ||
| 1.5 | 1.5.2 | Expired | ||
| 1.4 | 1.4.6 | Expired | ||
| 1.3 | 1.3.5 | Expired | ||
| 1.2 | 1.2.0 | Expired | ||
| 1.1 | 1.1.4 | Expired | ||
| 1.0 | 1.0.6 | Expired |
Maintained Soon (≤ 180 days) Expired
Subscribe lifecycle: RSS · RSS (expired) · ICS
Subscribe CVEs: RSS for “Tailwind CSS” · RSS (High+Critical only)
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
CVSS ≥ 0.0
2026-05-14
2026-05-12
High
CVE-2026-44301
Hugo is a static site generator. From 0.43 to before 0.161.0, when building a Hugo site that uses Node-based asset pipelines (PostCSS, Babel, TailwindCSS), Hugo invoked the configured Node tools with…
2025-07-01
Critical
CVE-2025-53104
gluestack-ui is a library of copy-pasteable components & patterns crafted with Tailwind CSS (NativeWind). Prior to commit e6b4271, a command injection vulnerability was discovered in the discussion-t…