rgrove CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM rgrove CVE published 2026-10-28

CVE-2026-116695

CVE-2026-116695: Crass CSS Sanitizer Bypass via Incorrect Tokenization of Bad URLs. The Crass library, used for CSS sanitization, contains a vulnerability that allows CSS sanitizers to pass through potentially malicious declarations, style rules, or at-rules due to incorrect tokenization of bad URLs. This issue affects Crass versions 0.0.1 through 1.0.7. Defenders responsible for RubyGems packages, partic [truncated]