https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 03 Nov 2026 23:01:16 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-61846 <p>Crass is a Ruby CSS parser that&#39;s fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively parses `CSS simple blocks and functions` without a depth guard. An attacker-controlled CSS value containing deeply nested blocks or functions can recurse until Ruby raises `SystemStackError`: stack level too deep, or cause excessive memory usage. Version 1.0.7 adds a configurable depth limit with a conservative default. This issue is fixed in version 1.0.7.</p> <p>Crass is a Ruby CSS parser that&#39;s fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively parses `CSS simple blocks and functions` without a depth guard. An attacker-controlled CSS value containing deeply nested blocks or functions can recurse until Ruby raises `SystemStackError`: stack level too deep, or cause excessive memory usage. Version 1.0.7 adds a configurable depth limit with a conservative default. This issue is fixed in version 1.0.7.</p> https://db.gcve.eu/vuln/fkie_cve-2026-61846 https://db.gcve.eu/vuln/ghsa-6jxj-px6v-747w <p><strong>Affected:</strong> RubyGems: crass</p> <p>### Impact</p> <p>Crass recursively parses CSS simple blocks and functions without a depth guard. An attacker-controlled value containing many deeply nested blocks can recurse until Ruby raises `SystemStackError: stack level too deep`, or can cause excessive memory usage.</p> <p>### Patches</p> <p>This is fixed in Crass 1.0.7, which adds a configurable depth limit with a conservative default.</p> <p>### Workarounds</p> <p>Add `SystemStackError` handling around Crass calls in your application. Buy more RAM.</p> <p><strong>Affected:</strong> RubyGems: crass</p> <p>### Impact</p> <p>Crass recursively parses CSS simple blocks and functions without a depth guard. An attacker-controlled value containing many deeply nested blocks can recurse until Ruby raises `SystemStackError: stack level too deep`, or can cause excessive memory usage.</p> <p>### Patches</p> <p>This is fixed in Crass 1.0.7, which adds a configurable depth limit with a conservative default.</p> <p>### Workarounds</p> <p>Add `SystemStackError` handling around Crass calls in your application. Buy more RAM.</p> https://db.gcve.eu/vuln/ghsa-6jxj-px6v-747w