You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
mend-bolt-for-githubbot
changed the title
CVE-2018-11693 High Severity Vulnerability detected by WhiteSource
CVE-2018-11693 (High) detected in node-sass-4.9.3.tgz
Feb 23, 2021
CVE-2018-11693 - High Severity Vulnerability
Vulnerable Library - node-sass-4.9.3.tgz
Wrapper around libsass
Library home page: https://registry.npmjs.org/node-sass/-/node-sass-4.9.3.tgz
Dependency Hierarchy:
Found in HEAD commit: d5d979704cfed5f9f0932aeb9d08bc7a2726a6e3
Vulnerability Details
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
Publish Date: 2018-06-04
URL: CVE-2018-11693
CVSS 3 Score Details (8.1)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: sass/node-sass@1210aab
Release Date: 2018-06-04
Fix Resolution: node-sass - 4.14.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: