VYPR
Vendor

Reduce CSS Calc Project

Products
1
CVEs
1
Across products
1
Status
Private

Products

1

Recent CVEs

1
  • CVE-2016-10548MedMay 31, 2018
    risk 0.40cvss 6.1epss 0.01

    Arbitrary code execution is possible in reduce-css-calc node module <=1.2.4 through crafted css. This makes cross sites scripting (XSS) possible on the client and arbitrary code injection possible on the server and user input is passed to the `calc` function.