sasstools/scss-tokenizer

sasstools/scss-tokenizer

GitHubGitHub
GitHubgithub.com
Releases13
Frequency7 months 6 days
Last Release
Stars25
A tokenzier for Sass' SCSS syntax
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-25758↗
5.3 MEDIUM5 MEDIUM

All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.