Vulnerabilities in rgrove
8 resultsCVE-2020-4054HIGHCross-site Scripting in SanitizeEPSS 1.9%CVE-2023-36823HIGHSanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element contentEPSS 0.7%CVE-2023-23627MEDIUMSanitize vulnerable to Cross-site Scripting via Improper neutralization of `noscript` elementEPSS 0.5%CVE-2026-61846MEDIUMCrass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usageEPSS 0.5%CVE-2026-61848MEDIUMCrass: Non-ASCII characters cause superlinear CPU consumptionEPSS 0.5%CVE-2026-61847MEDIUMCrass: A large number of adjacent CSS comments can trigger a SystemStackErrorEPSS 0.5%CVE-2026-61845HIGHCrass: Large numeric exponents cause CPU and memory denial of serviceEPSS 0.4%CVE-2026-116695MEDIUMCrass: Incorrect tokenization of bad URLs enables CSS sanitizer bypassEPSS 0.4%