rubygem-crass vulnerabilities (openEuler)

4 vulnerabilities.

• rubygem-crass openEuler Crass: Non-ASCII characters cause superlinear CPU consumption CVE-2026-61848 Fix available 6.3 MediumOctober 29, 2026
• rubygem-crass openEuler Crass: A large number of adjacent CSS comments can trigger a SystemStackError CVE-2026-61847 Fix available 6.3 MediumOctober 29, 2026
• rubygem-crass openEuler Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage CVE-2026-61846 Fix available 6.3 MediumOctober 29, 2026
• rubygem-crass openEuler Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass CVE-2026-116695 Fix available 5.3 MediumOctober 27, 2026