Skip to main content

Vendor/product archive

gfe-sass_project / gfe-sass CVEs

Beta · best-effort

1 CVEs tagged to gfe-sass_project / gfe-sass0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

CVE-2017-16040

Published Jun 4, 2018

gfe-sass is a library for promises (CommonJS/Promises/A,B,D) gfe-sass downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote…

CVSS 8.1 · High
Vendor/product tagsBeta · best-effort
Showing 1-1 of 1 CVEsPage 1 of 1