npm / postcss-selector-parser
postcss-selector-parser
What changed in postcss-selector-parser 7, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
1 breaking2 security3 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initpostcss-selector-parser 76 changes
Breaking changes 1
A non-prefix token before
|is no longer treated as a namespace.
Security 2
PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion
postcss-selector-parser allows denial of service through uncontrolled AST recursion
Fixes and other changes 3
Whitespace before a
*namespace in attribute selectors is preserved.Fixes a TypeError on unclosed
[,(and trailing|.Selector serialization now tolerates non-node children.