Libass · Libsass · CVE-2022-43357
**Name of the Vulnerable Software and Affected Versions**
libsass versions 3.6.5-8-g210218
sassc version 3.6.2
**Description**
The issue is a stack overflow vulnerability in the ast selectors.cpp file, specifically in the `Sass::CompoundSelector::has real parent ref` function. This vulnerability can be exploited by attackers to cause a denial of service (DoS). The command line driver for libsass, sassc, is also affected.
**Recommendations**
For libsass version 3.6.5-8-g210218, consider updating to a newer version to resolve the issue.
For sassc version 3.6.2, consider updating to a newer version to resolve the issue.
As a temporary workaround, consider restricting access to the `Sass::CompoundSelector::has real parent ref` function until a patch is available.