Security Advisory

CVE-2019-10799

8.2
HIGH

Vulnerability Description

compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.
Published Date February 24, 2020
Official Source NIST NVD Advisory