Sass · Libsass · CVE-2017-11554
**Name of the Vulnerable Software and Affected Versions**
LibSass version 3.4.5
**Description**
The issue is related to a stack consumption vulnerability in the `lex` function, located in `parser.hpp`, which is used in `sassc`. This vulnerability can be triggered by a crafted input, leading to a remote denial of service.
**Recommendations**
For LibSass version 3.4.5, consider updating to a newer version that contains a fix for this issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.