You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
mend-bolt-for-githubbot
changed the title
CVE-2018-11696 (High) detected in CSS::Sass-v3.3.0_03
CVE-2018-11696 (High) detected in libsass3.3.6, node-sass-3.13.1.tgz
Apr 8, 2021
mend-bolt-for-githubbot
changed the title
CVE-2018-11696 (High) detected in libsass3.3.6, node-sass-3.13.1.tgz
CVE-2018-11696 (Medium) detected in libsass3.3.6, node-sass-3.13.1.tgz
Oct 20, 2022
mend-bolt-for-githubbot
changed the title
CVE-2018-11696 (Medium) detected in libsass3.3.6, node-sass-3.13.1.tgz
CVE-2018-11696 (High) detected in libsass3.3.6, node-sass-3.13.1.tgz
Oct 31, 2022
CVE-2018-11696 - High Severity Vulnerability
Vulnerable Libraries - libsass3.3.6, node-sass-3.13.1.tgz
node-sass-3.13.1.tgz
Wrapper around libsass
Library home page: https://registry.npmjs.org/node-sass/-/node-sass-3.13.1.tgz
Path to dependency file: /public/vendor/owl.carousel/package.json
Path to vulnerable library: /public/vendor/owl.carousel/node_modules/node-sass/package.json
Dependency Hierarchy:
Found in HEAD commit: 430b5f2947d45ada69dc047ea870d3c988006344
Found in base branch: master
Vulnerability Details
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
Publish Date: 2018-06-04
URL: CVE-2018-11696
CVSS 3 Score Details (8.8)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2018-06-04
Fix Resolution (node-sass): 4.14.0
Direct dependency fix Resolution (grunt-sass): 2.0.0
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: