CVE-2018-20821

Name of the Vulnerable Software and Affected Versions: LibSass versions 3.5.5 and earlier

Description: The parsing component in LibSass allows attackers to cause a denial-of-service due to uncontrolled recursion in Sass::Parser::parse css variable value in parser.cpp.

Recommendations: For LibSass versions 3.5.5 and earlier, consider updating to a version later than 3.5.5 to resolve the issue. As a temporary workaround, consider restricting the input to the parse css variable value function to minimize the risk of uncontrolled recursion.