CVE-2018-19797

Name of the Vulnerable Software and Affected Versions LibSass version 3.5.5

Description The issue is related to a NULL Pointer Dereference in the function Sass::Selector List::populate extends, which may cause a Denial of Service (application crash) via a crafted sass input file.

Recommendations For LibSass version 3.5.5, consider updating to a newer version to mitigate the risk of a Denial of Service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.