Skip to content

Conversation

@nerdy-tech-com-gitub
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade sass from 1.77.8 to 1.93.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 43 versions ahead of your current version.

  • The recommended version was released 24 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Incorrect Authorization
SNYK-JS-VITE-9653016
155 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
155 Proof of Concept
high severity Acceptance of Extraneous Untrusted Data With Trusted Data
SNYK-JS-NUXT-9486043
155 No Known Exploit
medium severity Information Exposure
SNYK-JS-VITE-9685035
155 Proof of Concept
medium severity Directory Traversal
SNYK-JS-VITE-9919777
155 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELHELPERS-9397697
155 Proof of Concept
medium severity Open Redirect
SNYK-JS-KOA-10944994
155 Proof of Concept
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
155 No Known Exploit
medium severity Origin Validation Error
SNYK-JS-NUXTVITEBUILDER-8663232
155 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
155 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
155 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
155 Proof of Concept
critical severity Prototype Pollution
SNYK-JS-DEVALUE-12205530
155 Proof of Concept
critical severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-KOA-8720152
155 No Known Exploit
high severity Insecure Randomness
SNYK-JS-UNDICI-8641354
155 Proof of Concept
high severity Incorrect Authorization
SNYK-JS-VITE-9512410
155 Mature
medium severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
155 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
155 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-PARSEGITCONFIG-9403763
155 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-ROLLUP-8073097
155 Proof of Concept
medium severity Information Exposure
SNYK-JS-VITE-8023174
155 Proof of Concept
medium severity Origin Validation Error
SNYK-JS-VITE-8648411
155 Proof of Concept
medium severity Access Control Bypass
SNYK-JS-VITE-9576207
155 Proof of Concept
low severity Cross-site Scripting (XSS)
SNYK-JS-KOA-9679272
155 Proof of Concept
low severity Directory Traversal
SNYK-JS-NUXT-12878602
155 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SEND-7926862
155 No Known Exploit
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
155 No Known Exploit
low severity Directory Traversal
SNYK-JS-SIRV-12558119
155 Proof of Concept
low severity Missing Release of Memory after Effective Lifetime
SNYK-JS-UNDICI-10176064
155 Proof of Concept
low severity Relative Path Traversal
SNYK-JS-VITE-12558116
155 Proof of Concept
low severity Cross-site Scripting (XSS)
SNYK-JS-VITE-8022916
155 Proof of Concept
Release notes
Package name: sass
  • 1.93.2 - 2025-09-23

    To install Sass 1.93.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • No user-visible changes.

    JavaScript API

    • Fix another error in the release process for @ sass/types.

    See the full changelog for changes in earlier releases.

  • 1.93.1 - 2025-09-22

    To install Sass 1.93.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • No user-visible changes.

    JavaScript API

    • Fix an error in the release process for @ sass/types.

    See the full changelog for changes in earlier releases.

  • 1.93.0 - 2025-09-19

    To install Sass 1.93.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • Fix a crash when a style rule contains a nested @ import, and the loaded file @ uses a user-defined module as well as @ includes a top-level mixin which emits top-level declarations.

    JavaScript API

    • Release a @ sass/types package which contains the type annotations used by both the sass and sass-embedded package without any additional code or dependencies.

    See the full changelog for changes in earlier releases.

  • 1.92.1 - 2025-09-05

    To install Sass 1.92.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • Fix a bug where variable definitions from one imported, forwarded module would not be passed as implicit configuration to a later imported, forwarded module.

    See the full changelog for changes in earlier releases.

  • 1.92.0 - 2025-09-02
  • 1.91.0 - 2025-08-25
  • 1.90.0 - 2025-08-05
  • 1.89.2 - 2025-06-09
  • 1.89.1 - 2025-05-30
  • 1.89.0 - 2025-05-16
  • 1.88.0 - 2025-05-10
  • 1.87.0 - 2025-04-21
  • 1.86.3 - 2025-04-04
  • 1.86.2 - 2025-04-02
  • 1.86.1 - 2025-03-31
  • 1.86.0 - 2025-03-17
  • 1.85.1 - 2025-02-25
  • 1.85.0 - 2025-02-14
  • 1.84.0 - 2025-02-06
  • 1.83.4 - 2025-01-14
  • 1.83.3 - 2025-01-14
  • 1.83.2 - 2025-01-14
  • 1.83.1 - 2025-01-04
  • 1.83.0 - 2024-12-12
  • 1.82.0 - 2024-12-03
  • 1.81.1 - 2024-12-03
  • 1.81.0 - 2024-11-15
  • 1.80.7 - 2024-11-12
  • 1.80.6 - 2024-11-01
  • 1.80.5 - 2024-10-29
  • 1.80.4 - 2024-10-23
  • 1.80.3 - 2024-10-18
  • 1.80.2 - 2024-10-17
  • 1.80.1 - 2024-10-17
  • 1.80.0 - 2024-10-17
  • 1.79.6 - 2024-10-16
  • 1.79.5 - 2024-10-11
  • 1.79.4 - 2024-09-28
  • 1.79.3 - 2024-09-20
  • 1.79.2 - 2024-09-19
  • 1.79.1 - 2024-09-18
  • 1.79.0 - 2024-09-17
  • 1.78.0 - 2024-09-03
  • 1.77.8 - 2024-07-11
from sass GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade sass from 1.77.8 to 1.93.2.

See this package in npm:
sass

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/8b4160ff-3510-4d06-a27b-7930a5e75719?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants