CVE-2018-19837

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5

Description The issue allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file. This is due to incorrect parsing of '%' as a modulo operator.

Recommendations For versions prior to 3.5.5, update to version 3.5.5 or later to resolve the issue. As a temporary workaround, consider avoiding the use of '%' as a modulo operator in sass files until the issue is resolved.