-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1 #46
Labels
security vulnerability
Security vulnerability detected by WhiteSource
Comments
mend-bolt-for-github
bot
added
the
security vulnerability
Security vulnerability detected by WhiteSource
label
Nov 2, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Nov 3, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Nov 4, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Nov 6, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Nov 6, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Nov 6, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Nov 6, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Nov 8, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Nov 8, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Nov 8, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Nov 8, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Nov 8, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Nov 9, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Nov 9, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Nov 9, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Nov 10, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Nov 10, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Nov 10, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Nov 10, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Dec 1, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
Dec 1, 2020
mend-bolt-for-github
bot
changed the title
CVE-2018-19827 (High) detected in opennmsopennms-source-25.1.0-1, node-sass-4.14.1.tgz
CVE-2018-19827 (High) detected in node-sass-4.14.1.tgz, node-sassv4.13.1
Dec 3, 2020
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
CVE-2018-19827 - High Severity Vulnerability
Vulnerable Libraries - node-sass-4.14.1.tgz, node-sassv4.13.1
node-sass-4.14.1.tgz
Wrapper around libsass
Library home page: https://registry.npmjs.org/node-sass/-/node-sass-4.14.1.tgz
Path to dependency file: resume/package.json
Path to vulnerable library: resume/node_modules/node-sass/package.json
Dependency Hierarchy:
Found in HEAD commit: 5f3662aa801596074e7b1252738e340f55c2c760
Vulnerability Details
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (application crash) or possibly have unspecified other impact.
Publish Date: 2018-12-03
URL: CVE-2018-19827
CVSS 3 Score Details (8.8)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: sass/libsass#2784
Release Date: 2019-08-29
Fix Resolution: LibSass - 3.6.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: