Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-10687
5
MEDIUMCVSS v2
Published
June 29, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack.
GitHub