697 matches found
JLSEC-2026-664 Stack overflow vulnerability in `ast_selectors.cpp` in function...
Stack overflow vulnerability in astselectors.cpp in function Sass::CompoundSelector::hasrealparentref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service DoS. Also affects the command line driver for libsass, sassc 3.6.2...
JLSEC-2026-507
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parserselectors.cpp...
JLSEC-2026-509
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...
JLSEC-2026-505
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...
JLSEC-2026-506
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...
JLSEC-2026-510
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...
JLSEC-2026-504
The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::Parser::parsecssvariablevalue in parser.cpp...
JLSEC-2026-508
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...
JLSEC-2026-501
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause a Denial of Service application crash via a crafted sass input file...
JLSEC-2026-502
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp or SharedPtr.hpp that may cause a denial of service application crash or possibly have unspecified other impact...
PT-2026-44451
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast sel weave.cpp...
PT-2026-44446
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector List::populate extends in SharedPtr.hpp used by ast.cpp and ast selectors.cpp may cause a Denial of Service application crash via a crafted sass input file...
PT-2026-44454
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...
PT-2026-44452
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser selectors.cpp...
PT-2026-44449
The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::Parser::parse css variable value in parser.cpp...
PT-2026-44447
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp or SharedPtr.hpp that may cause a denial of service application crash or possibly have unspecified other impact...
PT-2026-44453
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese scope in prelexer.hpp...
PT-2026-44448
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operatorSass::Supports Operator in eval.cpp may cause a Denial of Service application crash via a crafted sass input file...
