20 matches found
CVE-2026-14651
A flaw was found in grass, a Sass compiler. This vulnerability allows a local attacker to cause a Denial of Service DoS by manipulating specific functions within the compiler, such as grasscompiler::selector::extend or grasscompiler::evaluate::visitor. This can lead to the compiler becoming...
CVE-2026-14650
A flaw was found in Grass. A local attacker could exploit a vulnerability in the UTF-8 Character Handler, specifically within the grasscompiler::rawtoparseerror function, by executing a manipulation. This could lead to a denial of service, making the system or application unavailable to legitimat...
CVE-2026-14651
A vulnerability has been found in connorskees grass up to 0.13.4. The impacted element is the function grasscompiler::selector::extend/grasscompiler::evaluate::visitor. The manipulation leads to denial of service. The attack must be carried out locally. The exploit has been disclosed to the publi...
CVE-2026-14650
A flaw has been found in connorskees grass up to 0.13.4. The affected element is the function grasscompiler::rawtoparseerror of the component UTF-8 Character Handler. Executing a manipulation can lead to denial of service. The attack is restricted to local execution. The exploit has been publishe...
CVE-2026-14651 connorskees grass visitor denial of service
A vulnerability has been found in connorskees grass up to 0.13.4. The impacted element is the function grasscompiler::selector::extend/grasscompiler::evaluate::visitor. The manipulation leads to denial of service. The attack must be carried out locally. The exploit has been disclosed to the publi...
EUVD-2026-41695
A vulnerability has been found in connorskees grass up to 0.13.4. The impacted element is the function grasscompiler::selector::extend/grasscompiler::evaluate::visitor. The manipulation leads to denial of service. The attack must be carried out locally. The exploit has been disclosed to the publi...
CVE-2026-14651
A vulnerability has been found in connorskees grass up to 0.13.4. The impacted element is the function grasscompiler::selector::extend/grasscompiler::evaluate::visitor. The manipulation leads to denial of service. The attack must be carried out locally. The exploit has been disclosed to the publi...
CVE-2026-14651
CVE-2026-14651 affects connorskees grass up to 0.13.4. The vulnerable element is grass_compiler::selector::extend and grass_compiler::evaluate::visitor, with a denial-of-service condition triggered by local input. The exploit is public and the description notes that the @extend algorithm can be e...
CVE-2026-14650 connorskees grass UTF-8 Character raw_to_parse_error denial of service
A flaw has been found in connorskees grass up to 0.13.4. The affected element is the function grasscompiler::rawtoparseerror of the component UTF-8 Character Handler. Executing a manipulation can lead to denial of service. The attack is restricted to local execution. The exploit has been publishe...
EUVD-2026-41694
A flaw has been found in connorskees grass up to 0.13.4. The affected element is the function grasscompiler::rawtoparseerror of the component UTF-8 Character Handler. Executing a manipulation can lead to denial of service. The attack is restricted to local execution. The exploit has been publishe...
CVE-2026-14650
Technical details about CVE-2026-14650 are not publicly available in the provided documents. Monitor for updates.
PT-2026-55731
Name of the Vulnerable Software and Affected Versions connorskees grass versions prior to 0.13.5 Description A local manipulation of the grass compiler::selector::extend/grass compiler::evaluate::visitor function can lead to a denial of service. This occurs because the @extend algorithm is...
PT-2026-55729
Name of the Vulnerable Software and Affected Versions connorskees grass versions prior to 0.13.5 Description A flaw in the UTF-8 Character Handler component allows local execution of a manipulation that can lead to a denial of service. The issue resides in the grass compiler::raw to parse error...
EUVD-2025-148002
Malicious code in tear-grass-rc npm...
newcastleartificialgrasscompany.co.uk Cross Site Scripting vulnerability OBB-2752564
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
`sass-rs` has been deprecated
The sass-rs crate is not maintained anymore as libsass is deprecated. Consider using https://github.com/connorskees/grass or https://github.com/kaj/rsass instead. Author's recommendation...
grass-shack.net Cross Site Scripting vulnerability OBB-1493431
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unfixed XSS vulnerability at www.grass-arts.com
Security researcher r14nul, has submitted on 18/02/2012 a cross-site-scripting XSS vulnerability affecting www.grass-arts.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/08/2012. It is currently...
Multiple GRASS symbolic link problems
No description provided...
[SA13693] GRASS Multiple Scripts Insecure Temporary File Creation
TITLE: GRASS Multiple Scripts Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13693 VERIFY ADVISORY: http://secunia.com/advisories/13693/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: GRASS 5.7.x http://secunia.com/product/4471/ DESCRIPTION: Javier...