← Database

CVE-2022-43357

HIGH CVSS: 7.5 Published: 2023-08-22 Modified: 2026-06-17

Description

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.

Affected Platforms

Sass-Lang SasscSass-Lang Libsass

Weakness Type

CWE-787

References