2 matches found
-tompan-reacttemplate (>=1.0.1 <=1.1.0), 08cms (=1.0.0) +17707 more potentially affected by CVE-2020-24025 via node-sass (>=2.0.0 <=6.0.1)
node-sass NPM version =2.0.0, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages =0.2.0 and more Source cves: CVE-2020-24025 Source advisory: OSV:GHSA-R8F7-9PFQ-MJMV...
Denial Of Service (DoS)
node-sass is vulnerable to denial of service DoS. The attack is possible because the renderSync function triggers C++ assertions in CustomImporterBridge::getimporterentry and CustomImporterBridge::postprocessreturnvalue, crashing the Node process...