Sass-Lang LibSass 3.5.5
Approved changes feed: RSS · Atom
cpe:2.3:a:sass-lang:libsass:3.5.5:*:*:*:*:*:*:*
part: a version: 3.5.5 update: *
| Vendor | Sass Lang (d2c2075d-70ff-5bd0-9b98-c28473ba02b2) |
|---|---|
| Product | Libsass (9a60f98b-f964-55a2-80b4-8fc2a843062f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libsass0 |
purl2cpe | 2026-06-01 10:18:01.036970 |
pkg:deb/debian/libsass1 |
purl2cpe | 2026-06-01 10:18:01.036972 |
pkg:deb/ubuntu/libsass0 |
purl2cpe | 2026-06-01 10:18:01.036974 |
pkg:deb/ubuntu/libsass1 |
purl2cpe | 2026-06-01 10:18:01.036976 |
pkg:github/sass/libsass |
purl2cpe | 2026-06-01 10:18:01.036977 |
pkg:rpm/fedora/libsass |
purl2cpe | 2026-06-01 10:18:01.036979 |
pkg:rpm/opensuse/libsass |
purl2cpe | 2026-06-01 10:18:01.036981 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-6286 |
vulnerable | 2026-06-08 05:14:10.454102 |
Details available
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.
Published: 2019-01-14T22:00:00.000Z
Updated: 2024-08-04T20:16:24.818Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6284 |
vulnerable | 2026-06-08 05:14:10.452112 |
Details available
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.
Published: 2019-01-14T22:00:00.000Z
Updated: 2024-08-04T20:16:24.648Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6283 |
vulnerable | 2026-06-08 05:14:10.451665 |
Details available
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.
Published: 2019-01-14T22:00:00.000Z
Updated: 2024-08-04T20:16:24.678Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20190 |
vulnerable | 2026-06-08 05:11:26.830756 |
Details available
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (application crash) via a crafted sass input file.
Published: 2018-12-17T20:00:00.000Z
Updated: 2024-08-05T11:58:18.151Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19827 |
vulnerable | 2026-06-08 05:11:16.134053 |
Details available
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (application crash) or possibly have unspecified other impact.
Published: 2018-12-03T19:00:00.000Z
Updated: 2024-08-05T11:44:20.494Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19826 |
vulnerable | 2026-06-08 05:11:16.133728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19797 |
vulnerable | 2026-06-08 05:11:16.121321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.