openRuyi Lookout
← Packages

libsass

autotoolsAdvisory 4

C/C++ port of the Sass CSS precompiler

Current
3.6.6
Candidate
Stale
License
MIT AND BSL-1.0

Build

TargetResultLast successful versionSucceeded at
rva23
3.6.6
rva20
3.6.6
x86_64
3.6.6

Advisory · 4

Query ecosystem
GITOSV
Query name
https://github.com/sass/libsassOSV
Query version
3.6.6OSV

Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.

  • OSV-2020-1420
    OSV
    Summary
    Bad-cast to Sass::PreValue from Sass::Unary_ExpressionOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA
  • OSV-2020-862
    OSV
    Summary
    Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::ExtOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA
  • OSV-2021-508
    OSV
    Summary
    Segv on unknown address in Sass::CompoundSelector::resolve_parent_refsOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA
  • OSV-2022-896
    OSV
    Summary
    Segv on unknown address in Sass::unifyComplexOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA

Description

Libsass is a C/C++ port of the Sass CSS precompiler. The original version was written in Ruby, but this version is meant for efficiency and portability. This library strives to be light, simple, and easy to build and integrate with a variety of platforms and languages.

Changelog

PR · 1

Checks
MonitorObservationLast checked
Source
Stale
Repository refresh: git fetch exited 128 (authentication)
Version
Stale
Source last confirmed at 2026-11-10T17:23:44+00:00; repository refresh overdue.
Build
Checked
GitHub
Checked
EOL
Not configured
No reliable monitor identity/configuration.
—
LicenseDiff
Not configured
No reliable monitor identity/configuration.
—
Dependencies
Not configured
No reliable monitor identity/configuration.
—
Advisory
Checked
Repository query; subpackage and local-patch applicability are not evaluated.
Yanked
Not configured
No reliable monitor identity/configuration.
—