8389 matches found
EUVD-2026-65972
Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79234
Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79234
The chromium browser is vulnerable to an injection flaw in CSS in versions prior to 152.0.7977.65 . A remote attacker can exploit this by hosting a crafted HTML page to potentially obtain sensitive information . The vulnerability has been addressed in the following distributions: Debian 12 bookwo...
EUVD-2026-65954
Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79291
Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79291
Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79291
Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79291
A vulnerability in Google Chrome (prior to version 152.0.7977.65 ) allows a remote attacker to cause an information leak via CSS by navigating to a crafted HTML page . The issue is classified with a Medium security severity. Remediation involves updating to the latest stable version; for instance...
Duplicate Advisory: Nokogiri CSS selector tokenizer has regular expression backtracking
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-c4rq-3m3g-8wgx. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector...
GHSA-5JHF-FPP7-V2PV Duplicate Advisory: Nokogiri CSS selector tokenizer has regular expression backtracking
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-c4rq-3m3g-8wgx. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector...
Regular Expression Denial of Service (ReDoS)
Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the CSS selector tokenizer process. An attacker can cause excessive resource consumption by injecting specially crafted CSS selector...
CVE-2026-79770
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...
CVE-2026-79770
Nokogiri versions before 1.19.3 are vulnerable to ReDoS (Regular Expression Denial of Service) in the CSS selector tokenizer , specifically in string-literal and identifier tokenization. An attacker who can supply adversarial CSS selectors to methods such as Node#css, Node#at_css, or Searchable#s...
CVE-2026-79770 Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...
CVE-2026-79770 Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...
CVE-2026-79770
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...
EUVD-2026-65528
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...
CVE-2026-79770 Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...
CVE-2026-79770
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...
CVE-2026-79770
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...