CVE-2026-61846

A flaw was found in crass. The CSS parser is vulnerable to a Denial of Service DoS because it recursively processes simple blocks and functions without enforcing a depth limit. A remote attacker can supply a specially crafted CSS input containing deeply nested structures to trigger stack exhausti...

CVE-2026-61848

A flaw was found in crass. This vulnerability allows a remote attacker to cause a Denial of Service DoS through excessive CPU resource consumption. When parsing input containing non-ASCII characters, inefficiencies in tracking the positions of multi-byte characters result in disproportionately lo...

CVE-2026-61847

A flaw was found in crass. A remote attacker can cause a Denial of Service DoS by submitting a specially crafted stylesheet containing a large number of adjacent comments. Because the parser recursively processes comments when discarding them, handling these consecutive comments triggers excessiv...

CVE-2026-61845

A flaw was found in crass. A remote attacker can cause a Denial of Service DoS by submitting specially crafted Cascading Style Sheets CSS inputs containing scientific notation with excessively large exponents. Because crass calculates these exponent values without proper limits, processing the...

CVE-2026-61847

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the :preservecomments option is not enabled, which is the default, Crass discards CSS comments by recursively consuming the next token. An attacker-provided stylesheet containing a ve...

CVE-2026-61846

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively parses CSS simple blocks and functions without a depth guard. An attacker-controlled CSS value containing deeply nested blocks or functions can recurse until Ruby raises...

CVE-2026-61845

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts CSS scientific notation number values with unbounded exponentiation before clamping the result to Float::MAX. Applications that use Crass to parse attacker-controlled CSS...

CVE-2026-61848

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when Crass parses input containing non-ASCII characters, inefficiencies in tracking the positions of multi-byte characters result in superlinear parsing time. An attacker-controlled CSS...

CVE-2026-61848

The Ruby CSS parser Crass (prior to version 1.0.7 ) is vulnerable to a denial of service (DoS) condition. When parsing input containing non-ASCII characters , inefficiencies in tracking the positions of multi-byte characters result in superlinear parsing time . An attacker can provide a malicious...

CVE-2026-61848 Crass: Non-ASCII characters cause superlinear CPU consumption

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when Crass parses input containing non-ASCII characters, inefficiencies in tracking the positions of multi-byte characters result in superlinear parsing time. An attacker-controlled CSS...

CVE-2026-61847

The Ruby CSS parser Crass is vulnerable to a denial of service (DoS) via uncontrolled recursion (CWE-674 ). Prior to version 1.0.7 , when the :preserve_comments option is disabled (the default), the parser recursively consumes tokens to discard CSS comments. An attacker-provided stylesheet with a...

EUVD-2026-114323

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the :preservecomments option is not enabled, which is the default, Crass discards CSS comments by recursively consuming the next token. An attacker-provided stylesheet containing a ve...

CVE-2026-61847 Crass: A large number of adjacent CSS comments can trigger a SystemStackError

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the :preservecomments option is not enabled, which is the default, Crass discards CSS comments by recursively consuming the next token. An attacker-provided stylesheet containing a ve...

CVE-2026-61846

The Crass Ruby CSS parser is vulnerable to uncontrolled recursion (CWE-674) in versions prior to 1.0.7 . The parser lacks a depth guard when recursively processing CSS simple blocks and functions , allowing an attacker-controlled CSS value with deeply nested structures to trigger a SystemStackErr...

CVE-2026-61846 Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively parses CSS simple blocks and functions without a depth guard. An attacker-controlled CSS value containing deeply nested blocks or functions can recurse until Ruby raises...

CVE-2026-61845

The Crass Ruby CSS parser is vulnerable to a Denial of Service (DoS) condition in versions prior to 1.0.7 . The root cause is that the parser converts CSS scientific notation number values with unbounded exponentiation before clamping the result to Float::MAX. An attacker providing a malicious CS...

CVE-2026-61845 Crass: Large numeric exponents cause CPU and memory denial of service

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts CSS scientific notation number values with unbounded exponentiation before clamping the result to Float::MAX. Applications that use Crass to parse attacker-controlled CSS...

CVE-2026-61847: rgrove crass: Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the :preservecomments option is not enabled, which is the default, Crass discards CSS comments by recursively consuming the next token. An attacker-provided stylesheet containing a ve...

CVE-2026-61845: rgrove crass: Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts CSS scientific notation number values with unbounded exponentiation before clamping the result to Float::MAX. Applications that use Crass to parse attacker-controlled CSS...

CVE-2026-61848: rgrove crass: Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when Crass parses input containing non-ASCII characters, inefficiencies in tracking the positions of multi-byte characters result in superlinear parsing time. An attacker-controlled CSS...