medium6.5
CVE-2019-18798
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave.cpp.
Impact
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave.cpp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sass-Lang | Libsass | before 3.6.3 |