Skip to content
OpenAdvisories

Package · npm

gfe-sass

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2017-16040

    gfe-sass downloads Resources over HTTP

    gfe-sass is a library for promises (CommonJS/Promises/A,B,D) gfe-sass downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker c…

    HackerOne gfe-sass node module gfe-sass npm