Description
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp.
Remediation
References
https://github.com/sass/libsass/issues/3000
Related Vulnerabilities
CVE-2020-8116 Vulnerability in npm package dot-prop
CVE-2021-23663 Vulnerability in npm package sey
CVE-2022-3952 Vulnerability in maven package com.manydesigns:portofino-microservice-launcher
CVE-2021-34428 Vulnerability in maven package org.eclipse.jetty:jetty-server
CVE-2023-46659 Vulnerability in maven package org.jenkins-ci.plugins:trac