Sass-lang vulnerabilities

Products

• Libsass 27

Newest

• sass-lang libsass Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector:... CVE-2022-43358 Fix available 7.5 HighAugust 22, 2023
• sass-lang libsass, sassc +1 more Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector:... CVE-2022-43357 Fix available 7.5 HighAugust 22, 2023
• sass-lang libsass Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref... CVE-2022-26592 Fix available 8.8 HighAugust 22, 2023
• sass-lang node-sass Improper Certificate Validation in node-sass CVE-2020-24025 Fix available 5.3 MediumJanuary 11, 2021
• sass-lang libsass LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in... CVE-2019-18797 Fix available 6.5 MediumNovember 6, 2019
• sass-lang libsass LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave... CVE-2019-18798 Fix available 6.5 MediumNovember 6, 2019
• sass-lang libsass LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in... CVE-2019-18799 Fix available 6.5 MediumNovember 6, 2019
• sass-lang libsass LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass:... CVE-2018-20822 Fix available 6.5 MediumApril 23, 2019
• sass-lang libsass The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service ... CVE-2018-20821 Fix available 6.5 MediumApril 23, 2019
• sass-lang libsass In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in... CVE-2019-6286 Fix available 6.5 MediumJanuary 14, 2019
• sass-lang libsass In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in... CVE-2019-6284 Fix available 6.5 MediumJanuary 14, 2019
• sass-lang libsass In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in... CVE-2019-6283 Fix available 6.5 MediumJanuary 14, 2019
• sass-lang libsass In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass:... CVE-2018-20190 Fix available 6.5 MediumDecember 17, 2018
• sass-lang libsass In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to... CVE-2018-19839 Fix available 6.5 MediumDecember 4, 2018
• sass-lang libsass In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow... CVE-2018-19838 Fix available 6.5 MediumDecember 4, 2018
• sass-lang libsass In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp... CVE-2018-19837 Fix available 6.5 MediumDecember 4, 2018
• sass-lang libsass In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp ... CVE-2018-19827 Fix available 8.8 HighDecember 3, 2018
• sass-lang libsass ** DISPUTED ** In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop... CVE-2018-19826 Disputed 6.5 MediumDecember 3, 2018
• sass-lang libsass In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List:... CVE-2018-19797 Fix available 6.5 MediumDecember 3, 2018
• sass-lang libsass In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead... CVE-2018-19219 6.5 MediumNovember 12, 2018
• sass-lang libsass In LibSass 3.5-stable, there is an illegal address access at Sass::Parser:... CVE-2018-19218 6.5 MediumNovember 12, 2018
• sass-lang libsass An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was... CVE-2018-11698 Fix available 8.1 HighJune 4, 2018
• sass-lang libsass An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was... CVE-2018-11697 Fix available 8.1 HighJune 4, 2018
• sass-lang libsass An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the... CVE-2018-11696 Fix available 8.8 HighJune 4, 2018
• sass-lang libsass An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function... CVE-2018-11695 Fix available 8.8 HighJune 4, 2018
• sass-lang libsass An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the... CVE-2018-11694 Fix available 8.8 HighJune 4, 2018
• sass-lang libsass An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was... CVE-2018-11693 Fix available 8.1 HighJune 4, 2018
• sass-lang libsass A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and... CVE-2018-11499 Fix available 9.8 CriticalMay 26, 2018