rgrove vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20232
3. 20265

Newest CVEs

• CVE-2026-61848

  Crass: Non-ASCII characters cause superlinear CPU consumption

  rgrove · crass

  Medium6.3
• CVE-2026-61847

  Crass: A large number of adjacent CSS comments can trigger a SystemStackError

  rgrove · crass

  Medium6.3
• CVE-2026-61846

  Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage

  rgrove · crass

  Medium6.3
• CVE-2026-61845

  Crass: Large numeric exponents cause CPU and memory denial of service

  rgrove · crass

  High8.9
• CVE-2026-116695

  Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass

  rgrove · crass

  Medium5.3
• CVE-2023-36823

  Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content

  rgrove · sanitize

  High7.1
• CVE-2023-23627

  Sanitize vulnerable to Cross-site Scripting via Improper neutralization of `noscript` element

  rgrove · sanitize

  Medium6.1
• CVE-2020-4054

  Cross-site Scripting in Sanitize

  rgrove · Sanitize

  High7.3