← All advisories

High severity8.8NVD Advisory· Published Aug 22, 2023· Updated Jun 17, 2026

CVE-2022-26592

CVE-2022-26592

Description

Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

Sass Lang/Libsass
cpe:2.3:a:sass-lang:libsass:3.6.5:*:*:*:*:*:*:*
Libsass/Libsasscpe-rescue
Sass/libsassllm-fuzzy
Range: =3.6.5
osv-coords6 versions
pkg:bitnami/sass pkg:rpm/opensuse/libsass&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/libsass&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/libsass&distro=openSUSE%20Tumbleweed pkg:rpm/suse/libsass&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4 pkg:rpm/suse/libsass&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5
>= 3.6.5, < 3.6.6+ 5 more
- (no CPE)range: >= 3.6.5, < 3.6.6
- (no CPE)range: < 3.6.5-150200.4.10.1
- (no CPE)range: < 3.6.5-150200.4.10.1
- (no CPE)range: < 3.6.5-2.1
- (no CPE)range: < 3.6.5-150200.4.10.1
- (no CPE)range: < 3.6.5-150200.4.10.1

Patches

Vulnerability mechanics

References

1

github.com/sass/libsass/issues/3174nvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.