Skip to content
OpenAdvisories

Package · Ubuntu

node-node-sass

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2022-25758

    Regular Expression Denial of Service (ReDoS)

    All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.

    node-node-sass scss-tokenizer Ubuntu npm
  • Medium 5.3
    CVE-2020-24025

    Improper Certificate Validation in node-sass

    Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.

    node-node-sass node-sass node-node-sass Debian Ubuntu npm