PT-2020-21211

Name of the Vulnerable Software and Affected Versions node-sass versions prior to 4.13.1 Description The issue allows attackers to crash the system's running Node process, leading to Denial of Service. This can be achieved by passing crafted objects to the renderSync function, which may trigger C...

Denial Of Service (DoS)

node-sass is vulnerable to denial of service DoS. The attack is possible because the renderSync function triggers C++ assertions in CustomImporterBridge::getimporterentry and CustomImporterBridge::postprocessreturnvalue, crashing the Node process...