Libsass vulnerabilities

2 known vulnerabilities in Libsass from Sass-lang. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Libsass: Out-of-bounds Write

  CVE-2022-43358Aug 22, 2023Sass-langEPSS 1.52%

  Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).

• 7.5 High severity

  Libsass: Out-of-bounds Write

  CVE-2022-43357Aug 22, 2023Sass-langEPSS 1.52%

  Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc