Skip to content
OpenAdvisories

Package · npm

scss-tokenizer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2022-25758

    Regular Expression Denial of Service (ReDoS)

    All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.

    node-node-sass scss-tokenizer Ubuntu npm