Scss-Tokenizer Project: >> Scss-Tokenizer Security Vulnerabilities
All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.
CVSS Score
5.3
EPSS Score
0.003
Published
2022-07-01