In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...
4.3CVSS7.6AI score0.02096EPSS
SaveExploits1References4Affected Software1
OSV•added 2019/01/14 10:29 p.m.•37 views
CVE-2019-6286
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...
