Advisories for Npm/Compile-Sass package

2020

Injection Vulnerability

compile-sass allows execution of arbritary commands. The function setupCleanupOnExit(cssPath) within dist/index.js is executed as part of the rm command without any sanitization.