CVE-2019-10799
compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.
CVSS 3.1 · 8.2 High
EPSS 2.3%
KEV · Not listed
Vendors
Products