RubyGems/css_parser CVE-2026-53727: high 8.6, EPSS 0.51%
Ruby CSS Parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file`
Action: Upgrade css_parser to 3.0.0 or later.
bundle update css_parserAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-9pmc-p236-855h
- nvd: CVE-2026-53727
- https://github.com/premailer/css_parser/security/advisories/GHSA-9pmc-p236-855h
- https://github.com/premailer/css_parser
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/css_parser/CVE-2026-53727.yml
- https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-53727
CVE-2026-53727 · published · modified · JSON