Description
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.
Remediation
References
https://github.com/sass/libsass/issues/3001
Related Vulnerabilities
CVE-2022-25851 Vulnerability in maven package org.webjars.npm:jpeg-js
CVE-2021-21290 Vulnerability in maven package io.netty:netty-transport
CVE-2018-15890 Vulnerability in maven package org.ethereum:ethereumj-core
CVE-2020-28448 Vulnerability in npm package multi-ini
CVE-2022-34115 Vulnerability in maven package io.dataease:dataease-plugin-common