Description

LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.

Remediation

References

https://github.com/sass/libsass/issues/3001

Related Vulnerabilities

CVE-2018-17960 Vulnerability in maven package org.webjars:ckeditor

CVE-2020-1948 Vulnerability in maven package org.apache.dubbo:dubbo-rpc

CVE-2023-42276 Vulnerability in maven package cn.hutool:hutool-json

CVE-2020-35476 Vulnerability in maven package net.opentsdb:opentsdb

CVE-2022-25896 Vulnerability in npm package passport

Severity

High

Classification

CWE-476 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory