Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-04	CVE-2019-10842	Code Injection vulnerability in Getbootstrap Bootstrap-Sass 3.2.0.3 Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. network low complexity getbootstrap CWE-94 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.