CVE-2018-19827: Sass-Lang Libsass

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (application crash) or possibly have unspecified other impact.

Affected products

• Sass-Lang Libsass: version 3.5.5 only

Published 2018-12-03. Last modified 2026-06-17.