Skip to content
OpenAdvisories
Unscored CVE-2018-19826 EUVD-2018-11501GHSA-vj6g-6xq4-cmrw

In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quo…

Published Dec 3, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quoted*) stack frame) may cause a Denial of Service via crafted sass input files with stray '&' or '/' characters. NOTE: Upstream comments indicate this issue is closed as "won't fix" and "works as intended" by design

References