744 matches found
RUSTSEC-2021-0136 `sass-rs` has been deprecated
The sass-rs crate is not maintained anymore as libsass is deprecated. Consider using https://github.com/connorskees/grass or https://github.com/kaj/rsass instead. Author's recommendation...
`sass-rs` has been deprecated
The sass-rs crate is not maintained anymore as libsass is deprecated. Consider using https://github.com/connorskees/grass or https://github.com/kaj/rsass instead. Author's recommendation...
CVE-2021-28956
The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2021-28956
The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2021-28956
The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
Code injection
UNSUPPORTED WHEN ASSIGNED The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...
CVE-2021-28956
The unofficial vscode-sass-lint aka Sass Lint extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2021-28956
The CVE-2021-28956 entry covers the unofficial vscode-sass-lint extension for Visual Studio Code, vulnerable through version 1.0.7. The root issue enables an attacker to cause execution of arbitrary binaries when a user opens a crafted workspace. The affected component is the vscode-sass-lint ext...
PT-2021-17999 · Unknown · Vscode-Sass-Lint
Name of the Vulnerable Software and Affected Versions: vscode-sass-lint extension versions 1.0.7 and earlier Description: The issue allows attackers to execute arbitrary binaries if the user opens a crafted workspace. It affects products that are no longer supported by the maintainer...
Microsoft Visual Studio Code 安全漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability in Microsoft Visual Studio Code vscode-sass-lint 1.0.7 allows an attacker to execute arbitrary binaries when a user opens a crafted workspace...
USN-4837-1 libsass vulnerabilities
It was discovered that LibSass incorrectly handled certain specially crafted sass file. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...
OSV-2021-508 Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31832 Crash type: Segv on unknown address Crash state: Sass::CompoundSelector::resolveparentrefs Sass::ComplexSelector::resolveparentrefs Sass::SelectorList::resolveparentrefs...
CVE-2020-24025
A flaw was found in nodejs-node-sass. Certificate validation is disabled when requesting binaries even if the user is not specifying an alternative download path...
Man-in-the-Middle (MitM)
node-sass is vulnerable to man-in-the-middle attack. The certificate validation when requesting binaries is disabled even if the user does not specify an alternative download path. This allows for a man-in-the-middle attacker to intercept and modify network traffic, and potentially introduce...
DEBIAN-CVE-2020-24025
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path...
CVE-2020-24025
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path...
CVE-2020-24025
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path...
AZL-27653 CVE-2020-24025 affecting package reaper for versions less than 3.1.1-9
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path...
