CVE-2019-10799

Publication date

2020-02-24 17:42:03

Family

snyk

State

PUBLISHED

Description

compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.