VulnSea

crass has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 5.3 (medium).

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
5.3
Publish → KEV
—
Last 90 days
2 prev 0

Weakness classes

Products

  • crass 2
Follow crass:RSS feedSave a search →Embed badge ↗
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

crass vulnerabilities

CVEs affecting crass, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-116695Medium· 5.3
yesterday

Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass

Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass

▾ Sunlitcrass · crassEPSS 0.35%via GHSA
CVE-2026-61845High
1w ago

Crass : Large numeric exponents cause CPU and memory denial of service

Crass : Large numeric exponents cause CPU and memory denial of service

▾ Twilightcrass · crassvia GHSA
crass vulnerabilities (CVEs) · VulnSea