Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade sass from 1.26.3 to 1.64.1 #566

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade sass from 1.26.3 to 1.64.1 #566

wants to merge 1 commit into from

Conversation

satoshinakamoto007
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade sass from 1.26.3 to 1.64.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 123 versions ahead of your current version.
  • The recommended version was released 25 days ago, on 2023-07-22.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-LOADERUTILS-3043105		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-Y18N-1021887		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1246392		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-AJV-584908		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-LOADERUTILS-3043105		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-LOADERUTILS-3043105		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-ASYNC-2441827		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-ASYNC-2441827		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-AWSSDK-1059424		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVERREGEX-1584358		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVERREGEX-1585624		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-1579269		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Command Injection
SNYK-JS-FINDPROCESS-1090284		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536531		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579147		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579152		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579155		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TMPL-1583443		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-OBJECTPATH-1017036		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-OBJECTPATH-1585658		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-INI-1048974		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1246392		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Arbitrary File Overwrite
SNYK-JS-TAR-1536528		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536531		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579147		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579152		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579155		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536528		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Command Injection
SNYK-JS-LODASH-1040724		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-567746		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-MERGEDEEP-1070277		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1023599		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-610226		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-Y18N-1021887		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Poisoning
SNYK-JS-QS-3153490		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Poisoning
SNYK-JS-QS-3153490		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Poisoning
SNYK-JS-QS-3153490		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVERREGEX-2824151		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Improper Input Validation
SNYK-JS-ACTIONSCORE-2980270		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-ALGOLIASEARCHHELPER-1570421		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-JSON5-3182856		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-JSON5-3182856		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-JSON5-3182856		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVERREGEX-1047770		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Server-Side Request Forgery (SSRF)
SNYK-JS-AXIOS-1038255		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-BROWSERSLIST-1090194		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-COOKIEJAR-3149984		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-FLAT-596927		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TERSER-2806366		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-559764		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Information Exposure
SNYK-JS-NODEFETCH-2342118		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Information Exposure
SNYK-JS-NODEFETCH-2342118		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Denial of Service
SNYK-JS-NODEFETCH-674311		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Denial of Service (DoS)
SNYK-JS-NWSAPI-2841516		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-OBJECTPATH-1569453		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HIGHLIGHTJS-1048676		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HTTPCACHESEMANTICS-3248783		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Reverse Tabnabbing
SNYK-JS-ISTANBULREPORTS-2328088		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-1072471		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-XML2JS-5414874		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PROMPTS-1729737		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758		 589/1000
Why? Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-2429795		 589/1000
Why? Has a fix available, CVSS 7.5		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: sass
  • 1.64.1 - 2023-07-22

    To install Sass 1.64.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    Embedded Sass

    • Fix a bug where a valid SassCalculation.clamp() with less than 3 arguments would throw an error.

    See the full changelog for changes in earlier releases.

  • 1.64.0 - 2023-07-20

    To install Sass 1.64.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • Comments that appear before or between @ use and @ forward rules are now emitted in source order as much as possible, instead of always being emitted after the CSS of all module dependencies.

    • Fix a bug where an interpolation in a custom property name crashed if the file was loaded by a @ use nested in an @ import.

    JavaScript API

    • Add a new SassCalculation type that represents the calculation objects added in Dart Sass 1.40.0.

    • Add Value.assertCalculation(), which returns the value if it's a SassCalculation and throws an error otherwise.

    • Produce a better error message when an environment that supports some Node.js APIs loads the browser entrypoint but attempts to access the filesystem.

    Embedded Sass

    • Fix a bug where nested relative @ imports failed to load when using the deprecated functions render or renderSync and those relative imports were loaded multiple times across different files.

    See the full changelog for changes in earlier releases.

  • 1.63.6 - 2023-06-21
  • 1.63.5 - 2023-06-21
  • 1.63.4 - 2023-06-14
  • 1.63.3 - 2023-06-09
  • 1.63.2 - 2023-06-08
  • 1.63.1 - 2023-06-08
  • 1.63.0 - 2023-06-07
  • 1.62.1 - 2023-04-25
  • 1.62.0 - 2023-04-11
  • 1.61.0 - 2023-04-06
  • 1.60.0 - 2023-03-23
  • 1.59.3 - 2023-03-14
  • 1.59.2 - 2023-03-11
  • 1.59.1 - 2023-03-10
  • 1.59.0 - 2023-03-10
  • 1.58.3 - 2023-02-18
  • 1.58.2 - 2023-02-17
  • 1.58.1 - 2023-02-14
  • 1.58.0 - 2023-02-01
  • 1.57.1 - 2022-12-19
  • 1.57.0 - 2022-12-17
  • 1.56.2 - 2022-12-08
  • 1.56.1 - 2022-11-09
  • 1.56.0 - 2022-11-04
  • 1.55.0 - 2022-09-21
  • 1.54.9 - 2022-09-07
  • 1.54.8 - 2022-08-31
  • 1.54.7 - 2022-08-31
  • 1.54.6 - 2022-08-29
  • 1.54.5 - 2022-08-19
  • 1.54.4 - 2022-08-10
  • 1.54.3 - 2022-08-04
  • 1.54.2 - 2022-08-03
  • 1.54.1 - 2022-08-02
  • 1.54.0 - 2022-07-22
  • 1.53.0 - 2022-06-22
  • 1.52.3 - 2022-06-08
  • 1.52.2 - 2022-06-03
  • 1.52.1 - 2022-05-20
  • 1.52.0 - 2022-05-20
  • 1.51.0 - 2022-04-26
  • 1.50.1 - 2022-04-19
  • 1.50.0 - 2022-04-07
  • 1.49.11 - 2022-04-01
  • 1.49.10 - 2022-03-30
  • 1.49.9 - 2022-02-24
  • 1.49.8 - 2022-02-17
  • 1.49.7 - 2022-02-01
  • 1.49.6 - 2022-02-01
  • 1.49.5 - 2022-02-01
  • 1.49.4 - 2022-02-01
  • 1.49.3 - 2022-02-01
  • 1.49.2 - 2022-02-01
  • 1.49.1 - 2022-01-31
  • 1.49.0 - 2022-01-18
  • 1.48.0 - 2022-01-13
  • 1.47.0 - 2022-01-07
  • 1.46.0 - 2022-01-06
  • 1.45.2 - 2021-12-31
  • 1.45.1 - 2021-12-21
  • 1.45.0 - 2021-12-10
  • 1.45.0-rc.2 - 2021-12-02
  • 1.45.0-rc.1 - 2021-11-30
  • 1.44.0 - 2021-11-30
  • 1.43.5 - 2021-11-24
  • 1.43.4 - 2021-10-26
  • 1.43.3 - 2021-10-21
  • 1.43.2 - 2021-10-13
  • 1.42.1 - 2021-09-22
  • 1.42.0 - 2021-09-21
  • 1.41.1 - 2021-09-16
  • 1.41.0 - 2021-09-14
  • 1.40.1 - 2021-09-14
  • 1.40.0 - 2021-09-13
  • 1.39.2 - 2021-09-10
  • 1.39.1 - 2021-09-09
  • 1.39.0 - 2021-09-02
  • 1.38.2 - 2021-08-28
  • 1.38.1 - 2021-08-23
  • 1.38.0 - 2021-08-17
  • 1.37.5 - 2021-08-04
  • 1.37.4 - 2021-08-03
  • 1.37.3 - 2021-08-03
  • 1.37.2 - 2021-08-03
  • 1.37.1 - 2021-08-02
  • 1.37.0 - 2021-07-30
  • 1.36.0 - 2021-07-23
  • 1.35.2 - 2021-07-07
  • 1.35.1 - 2021-06-15
  • 1.35.0 - 2021-06-15
  • 1.34.1 - 2021-06-02
  • 1.34.0 - 2021-05-22
  • 1.33.0 - 2021-05-21
  • 1.32.13 - 2021-05-12
  • 1.32.12 - 2021-04-28
  • 1.32.11 - 2021-04-19
  • 1.32.10 - 2021-04-16
  • 1.32.9 - 2021-04-16
  • 1.32.8 - 2021-02-18
  • 1.32.7 - 2021-02-10
  • 1.32.6 - 2021-02-01
  • 1.32.5 - 2021-01-20
  • 1.32.4 - 2021-01-12
  • 1.32.3 - 2021-01-12
  • 1.32.2 - 2021-01-07
  • 1.32.1 - 2021-01-06
  • 1.32.0 - 2020-12-30
  • 1.30.0 - 2020-12-04
  • 1.29.0 - 2020-11-05
  • 1.28.0 - 2020-10-29
  • 1.27.2 - 2020-10-29
  • 1.27.1 - 2020-10-28
  • 1.27.0 - 2020-10-08
  • 1.26.12 - 2020-10-06
  • 1.26.11 - 2020-09-18
  • 1.26.10 - 2020-07-06
  • 1.26.9 - 2020-06-22
  • 1.26.8 - 2020-06-05
  • 1.26.7 - 2020-05-29
  • 1.26.6 - 2020-05-28
  • 1.26.5 - 2020-04-24
  • 1.26.3 - 2020-03-11
from sass GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@satoshinakamoto007 @snyk-bot