| Package | Affected versions | Patched versions |
|---|---|---|
| libsass | ≥ 3.4.0, ≤ 3.5.4 |
A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (application crash) or possibly unspecified other impact.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free