Product

sass-lang node-sass vulnerabilities

1 published CVE affecting sass-lang node-sass, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest sass-lang node-sass CVEs

Newest publication first

CVE-2020-24025 Improper Certificate Validation in node-sass
Published 2021-01-11

MediumCVSS 5.3 EPSS 0.83%

Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

sass-lang node-sass vulnerabilities

Latest sass-lang node-sass CVEs

CVE-2020-24025 Improper Certificate Validation in node-sass