CVE-2026-68749

The vulnerability CVE-2026-68749 affects the html_sanitize_ex Ruby gem (versions before 1.5.3; affected range includes 0.3.1–1.5.2). It stems from an inefficient greedy regex in HtmlSanitizeEx.Scrubber.CSS.scrub/1 that backtracks on long CSS declarations, causing quadratic CPU consumption and pot...