Vulnerability index

Browse CVEs

12 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Libsass HIGH 7.5
CVE-2022-43357

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be ex…

No fix yet
Fix from $1,950 2023-08-22
Libsass HIGH 7.5
CVE-2022-43358

Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploi…

No fix yet
Fix from $1,950 2023-08-22
Libsass HIGH 8.8
CVE-2022-26592

Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.

No fix yet
Fix from $1,950 2023-08-22
Libsass MEDIUM 6.5
CVE-2018-20822

LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::…

No fix yet
Fix from $1,600 2019-04-23
Libsass MEDIUM 6.5
CVE-2019-6283

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.

No fix yet
Fix from $1,600 2019-01-14
Libsass MEDIUM 6.5
CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.

No fix yet
Fix from $1,600 2019-01-14
Libsass MEDIUM 6.5
CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_impor…

No fix yet
Fix from $1,600 2019-01-14
Libsass MEDIUM 6.5
CVE-2018-20190

In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Servi…

No fix yet
Fix from $1,600 2018-12-17
Libsass HIGH 8.8
CVE-2018-19827

In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service…

Mitigation only
Fix from $1,950 2018-12-03
Libsass MEDIUM 6.5
CVE-2018-19826

In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quoted*) stac…

Mitigation only
Fix from $1,600 2018-12-03
Libsass MEDIUM 6.5
CVE-2018-19218

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack.

No fix yet
Fix from $1,600 2018-11-12
Libsass MEDIUM 6.5
CVE-2018-19219

In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack.

No fix yet
Fix from $1,600 2018-11-12