| Package | Affected versions | Patched versions |
|---|---|---|
| gulp-scss-lint | ≤ 1.0.0 | |
| gulp-scss-lint | ≤ 1.0.0 |
gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free