sass/node-sass

sass/node-sass

GitHubGitHub
GitHubgithub.com
npmjs.orgnpmjs.org
Releases207
Frequency2 weeks 4 days
Last Release
Stars8.46K
:rainbow: Node.js bindings to libsass
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2020-24025NVD↗
>= 2.0.0, <= 4.14.1, >= 2.0.0, < 7.0.05.3 MEDIUM5 MEDIUM

Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.