Security
English
همهٔ محصولات

crass

RubyGems · بسته
5 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
Crass: A large number of adjacent CSS comments can trigger a SystemStackErrorCVE-2026-61847 · GHSA-WWPR-JFF3-395C Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9 Red HatRubyGems متوسط اصلاح گزارش شده
Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usageCVE-2026-61846 · GHSA-6JXJ-PX6V-747W Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red HatRubyGems متوسط اصلاح گزارش شده
Crass: Non-ASCII characters cause superlinear CPU consumptionCVE-2026-61848 · GHSA-8VFG-2R28-HVHJ Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red HatRubyGems متوسط اصلاح گزارش شده
Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypassCVE-2026-116695 · GHSA-PQ4G-8RXF-4G29 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red HatRubyGems متوسط اصلاح گزارش شده
Crass : Large numeric exponents cause CPU and memory denial of serviceCVE-2026-61845 · GHSA-6WMF-3R64-VCWV Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9 Red HatRubyGems زیاد اصلاح گزارش شده