Sass-lang vulnerabilities
We track 2 vulnerabilities in Sass-lang products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 22, 2023.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Sass-lang vulnerabilities
- 7.5 High severity
Libsass: Out-of-bounds Write
Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).
- 7.5 High severity
Libsass: Out-of-bounds Write
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc