You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
mend-for-github-combot
changed the title
CVE-2018-11696 (High) detected in libsass3.3.6, node-sass-3.12.1.tgz
CVE-2018-11696 (Medium) detected in libsass3.3.6, node-sass-3.12.1.tgz
Oct 19, 2022
mend-for-github-combot
changed the title
CVE-2018-11696 (Medium) detected in libsass3.3.6, node-sass-3.12.1.tgz
CVE-2018-11696 (High) detected in libsass3.3.6, node-sass-3.12.1.tgz
Nov 28, 2022
✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
mend-for-github-combot
changed the title
CVE-2018-11696 (High) detected in libsass3.3.6, node-sass-3.12.1.tgz
CVE-2018-11696 (High) detected in libsass3.3.6, node-sass-3.12.1.tgz - autoclosed
May 6, 2024
CVE-2018-11696 - High Severity Vulnerability
Vulnerable Libraries - libsass3.3.6, node-sass-3.12.1.tgz
node-sass-3.12.1.tgz
Wrapper around libsass
Library home page: https://registry.npmjs.org/node-sass/-/node-sass-3.12.1.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/node-sass
Dependency Hierarchy:
Found in HEAD commit: 815ae0afebcf867f02143f3ab9cf88b1d4dacdec
Found in base branch: master
Vulnerability Details
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
Publish Date: 2018-06-04
URL: CVE-2018-11696
CVSS 3 Score Details (8.8)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2018-06-04
Fix Resolution: libsass - 3.5.5;node-sass - 4.14.0
The text was updated successfully, but these errors were encountered: