4.13.1 vulnerabilities

[clement-fleury-assoconnect]

There are 16 active vulnerabilities referenced in Snyk : https://snyk.io/test/npm/node-sass/4.13.1
And there are 0 referenced in GitHub : https://github.com/sass/node-sass/security/advisories

These should be fixed ASAP, or contact Snyk to close them if they are false positives.

[adamsbloom]

Is there anyone looking at upgrading the version of the libsass binary in node-sass to >=3.6.9? I believe that might resolve the Snyk vulnerabilities.

[nschonni]

Libsass Upgrade is being tracked in #2685

[Janaka-Steph]

Are those vulnerabilities can affect a production web app already compiled?

[xzyfer]

@Janaka-Steph these only affect people compiling Sass as a web service. It does not affect compiling Sass code as a CLI and build pipeline.

[Janaka-Steph]

Alright thank you! Snyk should mention that.