Skip to content
OpenAdvisories

Product · HackerOne

fis-parser-sass-bin node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10660

    Downloads Resources over HTTP in fis-parser-sass-bin

    fis-parser-sass-bin a plugin for fis to compile sass using node-sass-binaries. fis-parser-sass-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the re…

    HackerOne fis-parser-sass-bin node module fis-parser-sass-bin npm