697 matches found
SUSE CVE-2019-6283
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...
SUSE CVE-2019-6286
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...
SUSE CVE-2019-6284
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...
SUSE CVE-2019-18797
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...
SUSE CVE-2019-18799
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parserselectors.cpp...
SUSE CVE-2019-18798
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...
Ubuntu: Security Advisory (USN-4837-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libsass:data_context_fuzzer: Segv on unknown address in Sass::unifyComplex
Detailed Report: https://oss-fuzz.com/testcase?key=6075857868816384 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzerasanlibsass Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: Sass::unifyComplex...
com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.24)
org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...
com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000076 via org.jruby:jruby-stdlib (1.7.24)
org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...
com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000078 via org.jruby:jruby-stdlib (1.7.24)
org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...
com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000075 via org.jruby:jruby-stdlib (1.7.24)
org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...
com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.24)
org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...
Mageia: Security Advisory (MGASA-2020-0049)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RUSTSEC-2021-0136 `sass-rs` has been deprecated
The sass-rs crate is not maintained anymore as libsass is deprecated. Consider using https://github.com/connorskees/grass or https://github.com/kaj/rsass instead. Author's recommendation...
`sass-rs` has been deprecated
The sass-rs crate is not maintained anymore as libsass is deprecated. Consider using https://github.com/connorskees/grass or https://github.com/kaj/rsass instead. Author's recommendation...
PT-2021-28388
Name of the Vulnerable Software and Affected Versions: sass-rs affected versions not specified Description: The issue concerns the sass-rs crate, which is no longer maintained due to libsass being deprecated. Recommendations: At the moment, there is no information about a newer version that...
USN-4837-1: LibSass vulnerabilities
It was discovered that LibSass incorrectly handled certain specially crafted sass file. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...
USN-4837-1 libsass vulnerabilities
It was discovered that LibSass incorrectly handled certain specially crafted sass file. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...
libsass:data_context_fuzzer: Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs
Detailed Report: https://oss-fuzz.com/testcase?key=6118697568698368 Project: libsass Fuzzing Engine: afl Fuzz Target: datacontextfuzzer Job Type: aflasanlibsass Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: Sass::CompoundSelector::resolveparentrefs...