crass vulnerabilities (RubyGems)
5 vulnerabilities.
-
crassRubyGems Crass: Non-ASCII characters cause superlinear CPU consumption 6.3 Medium -
crassRubyGems Crass: A large number of adjacent CSS comments can trigger a SystemStackError 6.3 Medium -
crassRubyGems Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage 6.3 Medium -
crassRubyGems Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass 5.3 Medium -
crassRubyGems Crass: Large numeric exponents cause CPU and memory denial of service 8.9 High