AZL-27653 CVE-2020-24025 affecting package reaper for versions less than 3.1.1-9

Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path...

fis-parser-sass-bin remote code execution vulnerability

fis-parser-sass-bin is a fis-based plugin for compiling sass using node-sass-binaries. A security vulnerability exists in fis-parser-sass-bin, which originates when a program downloads an executable file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerability by...

CVE-2016-10660

CVE-2016-10660 affects the fis-parser-sass-bin plugin used to compile Sass via node-sass-binaries. The vulnerability arises because the plugin downloads binary resources over HTTP, allowing a network-positioned attacker to perform a MITM interception and replace the requested binary with a malici...