3 matches found
CVE-2023-24251
WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...
OS Command Injection in compile-sass
compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExitcssPath" within "dist/index.js" is executed as part of the "rm" command without any sanitization...
GHSA-79QM-H35F-HR77 OS Command Injection in compile-sass
compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExitcssPath" within "dist/index.js" is executed as part of the "rm" command without any sanitization...