Description
There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1471786
Related Vulnerabilities
CVE-2018-3737 Vulnerability in npm package sshpk
CVE-2022-1291 Vulnerability in maven package org.webjars.npm:tableexport.jquery.plugin
CVE-2018-3724 Vulnerability in npm package general-file-server
CVE-2020-26226 Vulnerability in npm package semantic-release
CVE-2023-46604 Vulnerability in maven package org.apache.activemq:activemq-client