Known vulnerabilities in LibSass 3.1-alpha2
Vendor:
Sass
Software:
LibSass
Version:
3.1-alpha2
Software CPE:
cpe:2.3:a:sass:libsass:*:*:*:*:*:*:*:*
Website:
https://sass-lang.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
3.6.6
3.6.5
3.6.4
3.6.3
3.6.2
3.6.0
3.6.1
3.1
RELEASE-1.0
3.5.0.beta.3
3.5.0.beta.2
3.5.0.beta.1
3.4.4-rc1
3.4.0-RC1
3.3.6
3.3.5
3.3.4
3.3.3
3.3.2
3.3.1
3.3.0-beta3
3.3.0-beta2
3.3.0-beta1
3.3.0
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0-beta.6
3.2.0-beta.5
3.2.0-beta.4
3.2.0-beta.3
3.2.0-beta.2
3.2.0-beta.1
3.2.0
3.1.0-beta.2
3.1.0-beta
3.1.0
3.1-alpha2
3.1-alpha
3.0rc4
3.0rc3
3.0rc2
3.0rc1
3.0.2
3.0.1
3.0
2.1.0-beta
2.0
1.0.1
3.4.0
3.4.1
3.4.2
3.4.3
3.4.4
3.4.5
3.4.6
3.4.7
3.4.8
3.4.9
3.5.0
3.5.1
3.5.2
3.5.3
3.5.4
3.5.5
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85135 - NULL Pointer Dereference CVE-2018-11696 |
CWE-476 | High | 3.5.5 | 09.01.2024 |
SB2024010914 SB2018060425 |
||
| #VU84726 - Out-of-bounds write CVE-2022-43358 |
CWE-787 | High | 3.6.6 | 22.12.2023 |
SB2023122242 SB2023122245 SB2024031214 and 3 more |
||
| #VU84725 - Out-of-bounds write CVE-2022-43357 |
CWE-787 | High | 3.6.6 | 22.12.2023 |
SB2023122242 SB2023122245 SB2024031214 and 2 more |
||
| #VU84724 - Stack-based buffer overflow CVE-2022-26592 |
CWE-121 | High | 3.6.6 | 22.12.2023 |
SB2023122242 SB2023122245 SB2024031214 and 1 more |