rgrove crass

• CVE-2026-61848 Medium 6.3 Crass: Non-ASCII characters cause superlinear CPU consumption 0.5%
• CVE-2026-61847 Medium 6.3 Crass: A large number of adjacent CSS comments can trigger a SystemStackError 0.5%
• CVE-2026-61846 Medium 6.3 Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage 0.5%
• CVE-2026-61845 High 8.9 Crass: Large numeric exponents cause CPU and memory denial of service 0.4%
• CVE-2026-116695 Medium 5.3 Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass 0.4%