CVE-2026-61848
1 advisory.
RubyGems/crass CVE-2026-61848: medium 6.3, EPSS 0.49%
Crass: Non-ASCII characters cause superlinear CPU consumption
Action: Upgrade crass to 1.0.7 or later.
bundle update crassAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.7 | - |
Fixed versions
| 1.0.7 |
Sources
- osv: GHSA-8vfg-2r28-hvhj
- nvd: CVE-2026-61848
- https://github.com/rgrove/crass/security/advisories/GHSA-8vfg-2r28-hvhj
- https://github.com/rgrove/crass
- https://github.com/rgrove/crass/releases/tag/v1.0.7
- http://github.com/rgrove/crass/commit/da29664648bf80a97a6439e030a4814291c9afa5
CVE-2026-61848 · published · modified · JSON