eiskalteschatten/compile-sass

eiskalteschatten/compile-sass

GitHubGitHub
GitHubgithub.com
www.alexseifert.comwww.alexseifert.com
Releases19
Frequency3 months 6 days
Last Release
Stars4
A module to compile SASS on-the-fly and/or save it to CSS files using dart-sass for Node.js
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-10799↗
8.2 HIGH8.5 HIGH

compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.