Skip to content
OpenAdvisories

Package · npm

node-sass

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2020-24025

    Improper Certificate Validation in node-sass

    Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.

    node-sass node-node-sass node-node-sass Debian Ubuntu npm
  • Medium 5.9
    GHSA-9v62-24cr-58cx

    Denial of Service in node-sass

    Affected versions of `node-sass` are vulnerable to Denial of Service (DoS). Crafted objects passed to the `renderSync` function may trigger C++ assertions in `CustomImporterBridge::get_importer_entry` and `CustomImporterBridge::post_process_return_value` that…

    node-sass npm