Description
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.
Remediation
References
https://github.com/sass/libsass/issues/3001
Related Vulnerabilities
CVE-2022-43422 Vulnerability in maven package com.compuware.jenkins:compuware-topaz-utilities
CVE-2020-24164 Vulnerability in maven package com.taoensso:nippy
CVE-2017-18197 Vulnerability in maven package org.webjars.npm:mxgraph
CVE-2023-35145 Vulnerability in maven package org.jenkins-ci.plugins:sonargraph-integration