node-sass vulnerabilities

Wrapper around libsass

9.0.0

13 years ago

2 years ago

Package is deprecated

Known vulnerabilities in the node-sass package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Improper Certificate Validation	>=2.0.0 <7.0.0
M Denial of Service (DoS)	>=3.3.0 <4.13.1
M Denial of Service (DoS)	<4.11.0
M Out-of-bounds Read	<4.3.0
H Out-of-bounds Read	<3.6.0
M Out-of-bounds Read	*
M Out-of-bounds Read	<3.6.0
H Denial of Service (DoS)	<4.4.0
H Use After Free	*
M Uncontrolled Recursion	*
M Out-of-bounds Read	*
M Out-of-Bounds	*
H Out-of-bounds Read	<4.4.0
M NULL Pointer Dereference	*
H Out-of-bounds Read	<3.6.0
H Improper Input Validation	<4.4.0
M Denial of Service (DoS)	*
H Out-of-bounds Read	<4.4.0
H Uncontrolled Recursion	<4.4.0
H Uncontrolled Recursion	<4.4.0
H NULL Pointer Dereference	<4.9.0
H Out-of-bounds Read	<4.4.0
H Improper Input Validation	<4.4.0
M Denial of Service (DoS)	<3.6.0
M NULL Pointer Dereference	<3.6.0
H NULL Pointer Dereference	<4.11.0
M Resource Exhaustion	<4.11.0
H Uncontrolled Recursion	<4.8.0
M NULL Pointer Dereference	<3.6.0
H Out-of-bounds Read	<4.11.0
H NULL Pointer Dereference	*
M Out-of-bounds Read	<4.2.0
M Out-of-Bounds	*
C Use After Free	>=4.4.0 <4.13.1

148 VERSIONS IN TOTAL See all versions