Rrgrove

Products

Exploited and recent CVEs

• CVE-2026-61848 Medium 6.3 Crass: Non-ASCII characters cause superlinear CPU consumption 0.5%
• CVE-2026-61847 Medium 6.3 Crass: A large number of adjacent CSS comments can trigger a SystemStackError 0.5%
• CVE-2026-61846 Medium 6.3 Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage 0.5%
• CVE-2026-61845 High 8.9 Crass: Large numeric exponents cause CPU and memory denial of service 0.4%
• CVE-2026-116695 Medium 5.3 Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass 0.4%
• CVE-2023-36823 High 7.1 Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content 0.7%
• CVE-2023-23627 Medium 6.1 Sanitize vulnerable to Cross-site Scripting via Improper neutralization of `noscript` element 0.5%
• CVE-2020-4054 High 7.3 Cross-site Scripting in Sanitize 1.9%