Need help in addressing CVE-2018-11499

[mkelan]

Hi,

I am looking to address the below vulnerability

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11499

as per the recommendation, i need to use Libsass 3.6.0. However the most recent node-sass package (4.13.1) uses Libsass 3.5.4, as per the package.json.

I am trying to find when the node-sass that uses Libsass 3.6 will be released. I appreciate your help/inputs here.

thanks!

[xzyfer]

Subscribe to #2111