Known vulnerabilities in LibSass

Vendor: Sass
Software: LibSass
Software CPE: cpe:2.3:a:sass:libsass:*:*:*:*:*:*:*:*
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting LibSass LibSass is affected by 32 known vulnerabilities: 6 high, 22 medium, 4 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85135 - NULL Pointer Dereference
CVE-2018-11696
CWE-476 High
No
No
3.5.5 09.01.2024 SB2024010914
SB2018060425
#VU84726 - Out-of-bounds write
CVE-2022-43358
CWE-787 High
No
No
3.6.6 22.12.2023 SB2023122242
SB2023122245
SB2024031214
and 3 more
#VU84725 - Out-of-bounds write
CVE-2022-43357
CWE-787 High
No
No
3.6.6 22.12.2023 SB2023122242
SB2023122245
SB2024031214
and 2 more
#VU84724 - Stack-based buffer overflow
CVE-2022-26592
CWE-121 High
No
No
3.6.6 22.12.2023 SB2023122242
SB2023122245
SB2024031214
and 1 more
#VU30654 - Uncontrolled Recursion
CVE-2019-18797
CWE-674 Medium
No
No
3.6.1 06.11.2019 SB2019110664
SB2024010530
SB2024010914
#VU30655 - Out-of-bounds read
CVE-2019-18798
CWE-125 Medium
No
No
3.6.3 06.11.2019 SB2019110665
SB2021122238
#VU30656 - NULL Pointer Dereference
CVE-2019-18799
CWE-476 Medium
No
No
3.6.3 06.11.2019 SB2019110665
SB2021122238
#VU35977 - Resource exhaustion
CVE-2018-20822
CWE-400 Medium
No
No
- 23.04.2019 SB2019042320
SB2021122238
SB2024010530
and 1 more
#VU17069 - Out-of-bounds read
CVE-2019-6284
CWE-125 Medium
No
No
- 17.01.2019 SB2019011710
SB2021122238
SB2022070826
and 3 more
#VU17068 - Out-of-bounds read
CVE-2019-6283
CWE-125 Medium
No
No
- 17.01.2019 SB2019011710
SB2021122238
SB2022070826
and 5 more
#VU17067 - Out-of-bounds read
CVE-2019-6286
CWE-125 Medium
No
No
- 17.01.2019 SB2019011710
SB2021122238
SB2022070826
and 5 more
#VU16659 - NULL Pointer Dereference
CVE-2018-20190
CWE-476 Low
No
No
- 23.12.2018 SB2018120407
SB2021122238
SB2022070826
and 5 more
#VU16234 - Buffer over-read
CVE-2018-19839
CWE-126 Low
No
No
3.5.5 04.12.2018 SB2018120407
SB2021122238
SB2022070826
and 4 more
#VU16233 - Stack-based buffer overflow
CVE-2018-19838
CWE-121 Low
No
No
3.5.5 04.12.2018 SB2018120407
SB2022070826
SB2023102413
and 2 more
#VU16232 - Stack-based buffer overflow
CVE-2018-19837
CWE-121 Low
No
No
3.5.5 04.12.2018 SB2018120407
SB2024010914
#VU36344 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-19826
CWE-835 Medium
No
No
- 03.12.2018 SB2018120318
#VU36345 - Use After Free
CVE-2018-19827
CWE-416 High
No
No
- 03.12.2018 SB2018120318
SB2021122238
SB2022070826
and 5 more
#VU36350 - NULL Pointer Dereference
CVE-2018-19797
CWE-476 Medium
No
No
- 03.12.2018 SB2018120318
SB2021122238
SB2022070826
and 5 more
#VU36433 - Out-of-bounds read
CVE-2018-19218
CWE-125 Medium
No
No
- 12.11.2018 SB2018111212
#VU36434 - Improper input validation
CVE-2018-19219
CWE-20 Medium
No
No
- 12.11.2018 SB2018111212


Showing elements 1 - 20 out of 32