Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Satellite 6/rubygem-crass
Red Hat
· Package
5 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Crass: A large number of adjacent CSS comments can trigger a SystemStackError
CVE-2026-61847 · GHSA-WWPR-JFF3-395C
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8
Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9
Red Hat
RubyGems
Medium
Fix reported
2026-10-29
Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage
CVE-2026-61846 · GHSA-6JXJ-PX6V-747W
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9
Red Hat
RubyGems
Medium
Fix reported
2026-10-29
Crass: Non-ASCII characters cause superlinear CPU consumption
CVE-2026-61848 · GHSA-8VFG-2R28-HVHJ
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9
Red Hat
RubyGems
Medium
Fix reported
2026-10-29
Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass
CVE-2026-116695 · GHSA-PQ4G-8RXF-4G29
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9
Red Hat
RubyGems
Medium
Fix reported
2026-10-29
Crass : Large numeric exponents cause CPU and memory denial of service
CVE-2026-61845 · GHSA-6WMF-3R64-VCWV
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8
Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9
Red Hat
RubyGems
High
Fix reported
2026-10-20
