Repository navigation

Commit 4885b17

authored

Merge pull request #1220 from grosser/grosser/css

fix css_parser CVE-2026-53727

2 parents ad3eea4 + 2c624c0 commit 4885b17Copy full SHA for 4885b17

1 file changed

gems/css_parser
- CVE-2026-53727.yml

`‎gems/css_parser/CVE-2026-53727.yml‎`

-Original file line number
+Diff line change
   example — is exposed. The attacker only needs the ability to land one
   @import url(...) in the CSS that the host application parses.
 cvss_v4: 8.9
 -unaffected_versions:
 -  - "< 2.2.0"
 patched_versions:
   - ">= 3.0.0"
 related:

Comments

(0)