Read the docs

Sass-lang

Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Sass-lang records in CISA KEV

No Sass-lang vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libsass 27 records HIGH Node-sass 1 record LOW Sassc 1 record HIGH

Records

1 record in Sassc · all components

TI-2022-21168 CVE-2022-43357 · GHSA-j7vr-2gc9-mmv7

Stack overflow vulnerability in ast_selectors.cpp in function…

Priority HIGH 72

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01517 Published 2023-08-22 No fix listed CWE-787
Open these records in search →