A use-after-free vulnerability exists in handleerror() in sasscontext.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (application crash) or possibly unspecified other impact.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-11499.json"