Sass Lang maintains a widely embedded CSS preprocessing toolchain whose vulnerability footprint, though modest in absolute volume, carries outsized impact because the compiler is deeply integrated into front-end build pipelines and development workflows across countless projects. The vendor's disclosures center on its reference implementations—libsass, node-sass, and sassc—which serve as the backbone for style compilation in web development environments. The observed exposure does not cluster strongly around a single weakness class, reflecting the varied surface of a language processor and its bindings across different runtime contexts. Defenders should monitor this vendor's releases in the context of their build and deployment tooling rather than as a high-frequency patching requirement; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Sass Lang over time
Signals from CVEs in this vendor scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-11499CRITICAL A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (applicati | May 26, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-19827HIGH In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (application crash) or possibl | Dec 3, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-11696HIGH An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a de | Jun 4, 2018 | 8.8 | 26 | NO | NO |
CVE-2018-11695HIGH An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator which could be leveraged by an attacker to cause a denial of | Jun 4, 2018 | 8.8 | 26 | NO | NO |
CVE-2018-11694HIGH An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selector_append which could be leveraged by an attacker to c | Jun 4, 2018 | 8.8 | 26 | NO | NO |
CVE-2018-11693HIGH An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes which could be leveraged by an | Jun 4, 2018 | 8.1 | 26 | NO | NO |
CVE-2018-11698HIGH An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handle_error which could be leveraged by an attacker to d | Jun 4, 2018 | 8.1 | 25 | NO | NO |
CVE-2018-11697HIGH An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly() which could be leveraged by an attack | Jun 4, 2018 | 8.1 | 25 | NO | NO |
CVE-2022-26592HIGH Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function. | Aug 22, 2023 | 8.8 | 23 | NO | NO |
CVE-2018-20822MEDIUM LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp). | Apr 23, 2019 | 6.5 | 23 | NO | NO |
Signals from CVEs in this vendor scope (28 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Sass Lang.
Media articles that mention a CVE ID that affects a product developed by Sass Lang — matched by CVE ID, not by vendor name.