Lucene search

K
osvGoogleOSV:GHSA-79QM-H35F-HR77
HistoryApr 13, 2021 - 3:23 p.m.

OS Command Injection in compile-sass

2021-04-1315:23:13
Google
osv.dev
8

0.004 Low

EPSS

Percentile

72.8%

compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.

CPENameOperatorVersion
compile-sasslt1.0.5

0.004 Low

EPSS

Percentile

72.8%

Related for OSV:GHSA-79QM-H35F-HR77