CR
Product
crass
by rgrove · last CVE Oct 27, 2026
1
CVEs
0
On KEV
5.3
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add crass to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116695
New
5.3–Oct 27
Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass
Affected: < 1.0.8
Showing 1