Scss-tokenizer vulnerabilities
We track 1 vulnerability in Scss-tokenizer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 1, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Scss-tokenizer vulnerabilities
- 7.5 High severity
scss-tokenizer: Inefficient Regular Expression Complexity
All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.