description: compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.
problem types: Command Injection
affected:
{
product: compile-sass
vendor: n/a
versions:
status: affected, version: All versions prior to 1.0.5
}