Description
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.
Remediation
References
https://github.com/sass/libsass/issues/3001
Related Vulnerabilities
CVE-2020-19676 Vulnerability in maven package com.alibaba.nacos:nacos-api
CVE-2016-10707 Vulnerability in maven package org.webjars.bower:jquery
CVE-2022-36067 Vulnerability in npm package vm2
CVE-2022-25645 Vulnerability in npm package dset
CVE-2021-41182 Vulnerability in maven package org.webjars:jquery-ui