CVE-2018-20822

Name of the Vulnerable Software and Affected Versions: LibSass version 3.5.4

Description: The issue allows attackers to cause a denial-of-service due to uncontrolled recursion. This occurs in the Sass::Complex Selector::perform function in ast.hpp and the Sass::Inspect::operator in inspect.cpp.

Recommendations: For LibSass version 3.5.4, consider disabling the Sass::Complex Selector::perform function and the Sass::Inspect::operator as a temporary workaround until a patch is available. Restrict access to the affected modules to minimize the risk of exploitation.