Description
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp.
Remediation
References
https://github.com/sass/libsass/issues/3000
Related Vulnerabilities
CVE-2023-29514 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui
CVE-2020-28437 Vulnerability in npm package heroku-env
CVE-2022-41854 Vulnerability in maven package org.yaml:snakeyaml
CVE-2022-21700 Vulnerability in maven package io.micronaut:micronaut-http
CVE-2023-26476 Vulnerability in maven package org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki