CVE-2018-19839

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5

Description The issue allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file. This is due to the function handle error in sass context.cpp.

Recommendations For versions prior to 3.5.5, update to version 3.5.5 or later to resolve the issue.