Vulnerabilities (CVE)

Filtered by vendor Compile-sass Project Subscribe
Filtered by product Compile-sass
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-10799 1 Compile-sass Project 1 Compile-sass 2023-12-10 8.5 HIGH 8.2 HIGH
compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.