JLSEC-2026-506

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

PT-2026-44451

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast sel weave.cpp...

libsass:data_context_fuzzer: Segv on unknown address in Sass::weaveParents

Detailed Report: https://oss-fuzz.com/testcase?key=4739133724753920 Project: libsass Fuzzing Engine: afl Fuzz Target: datacontextfuzzer Job Type: aflasanlibsass Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: Sass::weaveParents Sass::weave Sass::unifyComplex...

SUSE CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

LibSass heap buffer overread vulnerability (CNVD-2019-40159)

LibSass is a C/C++ implementation of the Sass compiler. A heap buffer over-read vulnerability exists in Sass::weaveParents in astselweave.cpp in LibSass versions prior to 3.6.3. No details of the vulnerability are provided at this time...

CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

CVE-2019-18798: Out-of-bounds Read

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

PT-2019-15670

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.6.3 Description The issue allows a heap-based buffer over-read in the Sass::weaveParents function located in ast sel weave.cpp. Recommendations For versions prior to 3.6.3, update to version 3.6.3 or later to resolv...