« List of all CVEs

CVE-2022-43357

Published: 8/22/2023 Last updated: 10/3/2024 Reserved: 10/17/2022

Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

ocsigen-start

Products affected (2)

Product Vendor Version
n/a n/a < bfb48b54db25c3b4ef4bef5e0691464ebc4aa335
n/a n/a <= 8.14.0

References (12)