rgrove vulnerabilities
8 published CVEs name rgrove among the affected products.
- 8Published CVEs8 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61848
Crass: Non-ASCII characters cause superlinear CPU consumption
rgrove · crass
Medium6.3 - CVE-2026-61847
Crass: A large number of adjacent CSS comments can trigger a SystemStackError
rgrove · crass
Medium6.3 - CVE-2026-61846
Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage
rgrove · crass
Medium6.3 - CVE-2026-61845
Crass: Large numeric exponents cause CPU and memory denial of service
rgrove · crass
High8.9 - CVE-2026-116695
Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass
rgrove · crass
Medium5.3 - CVE-2023-36823
Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content
rgrove · sanitize
High7.1 - CVE-2023-23627
Sanitize vulnerable to Cross-site Scripting via Improper neutralization of `noscript` element
rgrove · sanitize
Medium6.1 - CVE-2020-4054
Cross-site Scripting in Sanitize
rgrove · Sanitize
High7.3