CVE-2019-18799

2019-11-0616:15:10

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.

CPENameOperatorVersion
libsasseq3.4.2
libsasseq3.5.2
libsasseq3.2.0-beta.6
libsasseq3.3.6
libsasseq3.3.2
libsasseq3.5.0.beta.1
libsasseq3.2.4
libsasseq3.2.0-beta.1
libsasseq3.3.3
libsasseq1.0.1

Name	Operator	Version
libsass	eq	3.4.2
libsass	eq	3.5.2
libsass	eq	3.2.0-beta.6
libsass	eq	3.3.6
libsass	eq	3.3.2
libsass	eq	3.5.0.beta.1
libsass	eq	3.2.4
libsass	eq	3.2.0-beta.1
libsass	eq	3.3.3
libsass	eq	1.0.1