Compile-Sass Project: >> Compile-Sass >> 1.0.4 Security Vulnerabilities
compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.
CVSS Score
8.2
EPSS Score
0.004
Published
2020-02-24