CVE-2022-43357

2023-08-2200:00:00

mitre

www.cve.org

stack overflow

ast_selectors.cpp

compoundselector

denial of service

command line driver

sassc 3.6.2

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%

JSON

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.