You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
mend-bolt-for-githubbot
changed the title
CVE-2018-11696 (High) detected in node-sass-3.13.1.tgz, libsass3.3.6
CVE-2018-11696 (High) detected in node-sass-3.13.1.tgz, libsass3.3.6 - autoclosed
May 15, 2021
CVE-2018-11696 - High Severity Vulnerability
Vulnerable Libraries - node-sass-3.13.1.tgz, libsass3.3.6
node-sass-3.13.1.tgz
Wrapper around libsass
Library home page: https://registry.npmjs.org/node-sass/-/node-sass-3.13.1.tgz
Path to dependency file: laravel-elixir-clean-unofficial/package.json
Path to vulnerable library: laravel-elixir-clean-unofficial/node_modules/node-sass
Dependency Hierarchy:
Found in HEAD commit: 4a677400390892b6063782abef8ecc4e26f2a275
Found in base branch: master
Vulnerability Details
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
Publish Date: 2018-06-04
URL: CVE-2018-11696
CVSS 3 Score Details (8.8)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: sass/libsass#2665
Release Date: 2018-06-04
Fix Resolution: Libsass:3.5.5, Node-sass:4.14.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: