CVE-2019-10799

2020-02-2418:15:15

Google

osv.dev

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.8%

JSON

compile-sass prior to 1.0.5 allows execution of arbritary commands. The function “setupCleanupOnExit(cssPath)” within “dist/index.js” is executed as part of the “rm” command without any sanitization.

CPENameOperatorVersion
compile-sasseq0.0.2
compile-sasseq0.1.1
compile-sasseq0.0.3
compile-sasseq1.0.1
compile-sasseq0.1.4
compile-sasseq.0.1.2
compile-sasseq1.0.3
compile-sasseq1.0.2
compile-sasseq0.1.3
compile-sasseq0.0.5

Name	Operator	Version
compile-sass	eq	0.0.2
compile-sass	eq	0.1.1
compile-sass	eq	0.0.3
compile-sass	eq	1.0.1
compile-sass	eq	0.1.4
compile-sass	eq	.0.1.2
compile-sass	eq	1.0.3
compile-sass	eq	1.0.2
compile-sass	eq	0.1.3
compile-sass	eq	0.0.5