2 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-44312
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cssparser is a Ruby CSS parser. Prior to 2.1.0 and 1.22.0, the CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle MITM attacker to...
5.8CVSS5.3AI score0.00146EPSS
SaveExploits0References3
Unsafe Dependency Resolution
Overview Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to improper validation of HTTPS certificates in the parser process. An attacker can inject or modify remote CSS content by performing a man-in-the-middle attack during stylesheet loading over HTTPS...
6.9CVSS5.8AI score0.00146EPSS
SaveExploits0References3
20