Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Crass: Non-ASCII characters cause superlinear CPU consumption CVE-2026-61848, GHSA-8vfg-2r28-hvhj | Medium | Not scored | 5 days ago | RubyGems crass |
Crass: A large number of adjacent CSS comments can trigger a SystemStackError CVE-2026-61847, GHSA-wwpr-jff3-395c | Medium | Not scored | 5 days ago | RubyGems crass |
Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage CVE-2026-61846, GHSA-6jxj-px6v-747w | Medium | Not scored | 5 days ago | RubyGems crass |
Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass CVE-2026-116695, GHSA-pq4g-8rxf-4g29 | Medium | Not scored | 6 days ago | RubyGems crass |