npm package
tailwindcss vulnerabilities by version
The latest release, 4.3.3 (Jul 16, 2026), has no known vulnerabilities. 0% of last week’s 137.3M downloads went to versions with known vulnerabilities. OSV.dev lists no advisories for tailwindcss.
npm (opens in a new tab) describes it as “A utility-first CSS framework for rapidly building custom user interfaces.”
- Latest release
- 4.3.3
- Jul 16, 2026, no known vulnerabilities
- Downloads last week
- 137.3M
- All versions, from npm
- Advisories on OSV.dev
- 0
- Licence
- MIT
Most-downloaded versions last week
From npm’s per-version download counts for the last 7 days, each checked against OSV.dev. Open a version for its advisories and what to upgrade to.
Who is still on a vulnerable tailwindcss
0% of last week’s 137.3M tailwindcss downloads went to versions with known vulnerabilities.
From npm’s per-version download counts for the last 7 days, each version checked against OSV.dev. The versions checked cover over 99% of downloads.
Release lines
Support dates from endoflife.date (opens in a new tab). A line past its end date gets no more security fixes.
Which tailwindcss do you have?
Paste a public GitHub repo or drop your package.json and see every vulnerable, end-of-life or deprecated dependency, with one fix task for your coding agent. Free, no sign-up.
How this page is checked
StackPrism reads every OSV.dev advisory for tailwindcss, merges duplicates filed under several ids, and asks OSV.dev which ones affect each version listed. Releases and their dates come from deps.dev, downloads from npm, support dates from endoflife.date. No AI writes this page: every sentence comes from that data, refreshed every few hours.
Last checked against OSV.dev, npm, deps.dev and endoflife.date.