Known vulnerabilities in node-sass
Vendor:
xzyfer
Software:
node-sass
Software CPE:
cpe:2.3:a:xzyfer:node-sass:*:*:*:*:*:npm:*:*
Website:
https://www.npmjs.com/~xzyfer
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
9.0.0
8.0.0
7.0.3
7.0.2
7.0.1
7.0.0
6.0.1
6.0.0
5.0.0
4.14.1
4.14.0
4.13.1
4.7.0
3.6.3
3.6.2
3.6.1
3.5.5
3.5.4
3.4.9
3.4.8
3.4.7
3.4.6
3.4.5
3.4.4
3.3.6
3.3.5
3.3.4
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.0.2
3.0.1
3.0
2.0
4.13.0
4.12.0
4.11.0
4.10.0
4.9.4
4.9.3
4.9.2
4.9.1
4.9.0
4.8.3
4.8.2
4.8.1
4.8.0
4.7.2
4.7.1
4.6.1
4.6.0
4.5.3
4.5.2
4.5.1
4.5.0
4.4.0
4.3.0
4.2.0
4.1.1
4.1.0
4.0.0
3.13.1
3.13.0
3.12.5
3.12.4
3.12.3
3.12.2
3.12.1
3.12.0
3.11.3
3.11.2
3.11.1
3.11.0
3.10.1
3.10.0
3.9.3
3.9.2
3.9.1
3.9.0
3.8.0
3.7.0
3.6.0
3.5.3
3.5.2
3.5.1
3.5.0
3.4.2
3.4.1
3.4.0
3.3.3
3.3.2
3.3.1
3.3.0
3.2.0
3.1.2
3.1.1
3.1.0
3.0.0
2.1.1
2.1.0
2.0.1
2.0.0
1.2.3
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.6
0.8.5
0.8.4
0.8.3
0.8.2
0.8.1
0.8.0
0.7.0
0.6.7
0.6.6
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.4
0.4.3
0.4.2
0.4.1
0.4.0
0.3.0
0.2.6
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU61501 - Improper Certificate Validation CVE-2020-24025 |
CWE-295 | Medium | 5.0.0 | 21.03.2022 |
SB2022032131 SB2022032213 SB2022070826 and 4 more |
||
| #VU24239 - Resource exhaustion |
CWE-400 | Medium | - | 14.01.2020 |
SB2020011417 |