| Package | Affected versions | Patched versions |
|---|---|---|
| libsass | = 3.6.5-8-g210218 | |
| sassc | = 3.6.2 |
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free