CVE-2019-18798

Published November 6th, 2019

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave.cpp.

A C/C++ implementation of a Sass compiler

GitHub

4.33K