Sass-lang

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Sass-lang records in CISA KEV

No Sass-lang vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Libsass 27 records HIGH Node-sass 1 record LOW Sassc 1 record HIGH

Records

1 record in Node-sass · all components

TI-2020-14771 CVE-2020-24025 · GHSA-r8f7-9pfq-mjmv

Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries…

LOW 26

Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0083 Published 2021-01-11 Fixed in 7.0.0 CWE-295

Open these records in search →

Critical	1
High	10
Medium	17
Low	0
No CVSS	0