Sass-Lang: >> Libsass >> 3.6.1 Security Vulnerabilities
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave.cpp.
CVSS Score
6.5
EPSS Score
0.004
Published
2019-11-06
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.
CVSS Score
6.5
EPSS Score
0.004
Published
2019-11-06