CVE-2019-6286

Name of the Vulnerable Software and Affected Versions LibSass version 3.5.5

Description A heap-based buffer over-read issue exists in the Sass::Prelexer::skip over scopes function, located in prelexer.hpp, which is called from Sass::Parser::parse import(). This issue is similar to a previously identified problem.

Recommendations For LibSass version 3.5.5, consider updating to a newer version to resolve the issue, as the current version contains a heap-based buffer over-read flaw in the Sass::Prelexer::skip over scopes function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.