Ryan Grove Crass processing logic error vulnerability

Versions prior to Ryan Grove Crass 1.0.8 contain a logic error vulnerability. This occurs when processing the remainder of a malformed URL; after escaping backslashes, the subsequent right parenthesis is erroneously treated as escaped, allowing declarations, style rules, or at-rules to remain...