Giters

sass / node-sass

:rainbow: Node.js bindings to libsass

Home Page:https://npmjs.org/package/node-sass

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

vulnerability at version 9.0.0

itsKnight847 opened this issue · comments

commented

  • NPM version (npm -v): 10.2.3

  • Node version (node -v): 20.10

  • Node Process (node -p process.versions):
    {
    node: '20.10.0',
    acorn: '8.10.0',
    ada: '2.7.2',
    ares: '1.20.1',
    base64: '0.5.0',
    brotli: '1.0.9',
    cjs_module_lexer: '1.2.2',
    cldr: '43.1',
    icu: '73.2',
    llhttp: '8.1.1',
    modules: '115',
    napi: '9',
    nghttp2: '1.57.0',
    nghttp3: '0.7.0',
    ngtcp2: '0.8.1',
    openssl: '3.0.12+quic',
    simdutf: '3.2.18',
    tz: '2023c',
    undici: '5.26.4',
    unicode: '15.0',
    uv: '1.46.0',
    uvwasi: '0.0.19',
    v8: '11.3.244.8-node.25',
    zlib: '1.2.13.1-motley'
    }

  • Node Platform (node -p process.platform): win32

  • Node architecture (node -p process.arch): x64

  • node-sass version (node -p "require('node-sass').info"):
    node-sass 9.0.0 (Wrapper) [JavaScript]
    libsass 3.5.5 (Sass Compiler) [C/C++]

  • npm node-sass versions (npm ls node-sass):
    `-- node-sass@9.0.0

Hi,
I'm trying to upgrade project that use this library to the latest version and I found out there are vulnerability at the library.
is someone on it?
image