{"action":"Upgrade crass to 1.0.7 or later.","affected":[{"fixed":"1.0.7","introduced":"0"}],"component":"crass","cve_ids":["CVE-2026-61845"],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["1.0.7"],"ghsa_id":"GHSA-6wmf-3r64-vcwv","id":"tcs_01M5JK80T6GND8ZA63HFSD28K1","modified_at":"2026-10-20T14:45:03.938633122Z","published_at":"2026-10-20T14:32:39Z","references":["https://osv.dev/vulnerability/GHSA-6wmf-3r64-vcwv","https://github.com/rgrove/crass/security/advisories/GHSA-6wmf-3r64-vcwv","https://github.com/rgrove/crass","https://github.com/rgrove/crass/releases/tag/v1.0.7","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/crass/GHSA-6wmf-3r64-vcwv.yml","https://rubygems.org/gems/crass/versions/1.0.7"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-6wmf-3r64-vcwv","url":"https://osv.dev/vulnerability/GHSA-6wmf-3r64-vcwv"}],"summary":"Crass : Large numeric exponents cause CPU and memory denial of service"}