0.001 Low
EPSS
Percentile
34.7%
In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack.
bugzilla.redhat.com/show_bug.cgi?id=1652070
www.cve.org/CVERecord?id=CVE-2018-19218 https://nvd.nist.gov/vuln/detail/CVE-2018-19218