← All advisories

Medium severity6.5NVD Advisory· Published Nov 6, 2019· Updated Jun 17, 2026

CVE-2019-18797

CVE-2019-18797

Description

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

Sass Lang/Libsass
cpe:2.3:a:sass-lang:libsass:*:*:*:*:*:*:*:*
Range: <3.6.1
LibSass/LibSassdescription
Sass/libsassllm-fuzzy
Range: <3.6.1
osv-coords6 versions
pkg:deb/ubuntu/[email protected]?arch=source&distro=esm-apps/xenial pkg:deb/ubuntu/[email protected]~esm1?arch=source&distro=esm-apps/bionic pkg:deb/ubuntu/[email protected]?arch=source&distro=focal pkg:deb/ubuntu/[email protected]+20231221-3?arch=source&distro=noble pkg:deb/ubuntu/[email protected]+20231221-3?arch=source&distro=oracular pkg:deb/ubuntu/[email protected]?arch=source&distro=jammy
>= 0+ 5 more
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0

Patches

Vulnerability mechanics

References

1

github.com/sass/libsass/issues/3000nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.