[ Vendor · 5 CVEs ]
rgrove
CVEs affecting rgrove published in the last 30 days, plus any rgrove CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-61845 | 30 Oct 2026 | CVSS 8.9 | Crass : Large numeric exponents cause CPU and memory denial of serviceCrass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts `CSS scientific notation`… | Fix |
| CVE-2026-61846 | 30 Oct 2026 | CVSS 6.3 | Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usageCrass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively parses `CSS simple… | Fix |
| CVE-2026-61847 | 30 Oct 2026 | CVSS 6.3 | Crass: A large number of adjacent CSS comments can trigger a SystemStackErrorCrass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the `:preserve_comments` option is… | Fix |
| CVE-2026-61848 | 30 Oct 2026 | CVSS 6.3 | Crass: Non-ASCII characters cause superlinear CPU consumptionCrass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when Crass parses input containing… | Fix |
| CVE-2026-116695 | 27 Oct 2026 | CVSS 5.3 | Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypassCrass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing… | Fix |