CVE-2026-61847

Crass: A large number of adjacent CSS comments can trigger a SystemStackError

CVSS score

—

EPSS probability

—

Risk score

—

Published

4 h ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.5

CVE-2026-66066Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

Vendorrails Productrails+2 etkilenen

Patch verified Public Exploits:11EPSS %303 mo ago

8.7

CVE-2020-36939Cassandra Web 0.5.0 - Remote File Read

Vendoravalanche123 ProductCassandra Web+2 etkilenen

Patch status unknownEPSS %39 mo ago

10.0

CVE-2026-55107Kobako Vulnerable to Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

Vendorelct9620 Productkobako+4 etkilenen

Patch verifiedEPSS %129 d ago

9.9

CVE-2026-77602OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

VendorOpenC3 Productcosmos+4 etkilenen

Patch verifiedEPSS %11 mo ago

7.5

CVE-2026-67432Resource allocation without limits

Vendorrubygems Productmcp

Patch verifiedEPSS %13 mo ago

8.1

CVE-2026-53510Code injection

Vendorrubygems Productsavon

Patch verifiedEPSS %13 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-61847"

Crass: A large number of adjacent CSS comments can trigger a SystemStackError

Related Security News

Similar Vulnerabilities

Get this vulnerability through the API

DayBreach

Glossary & Reference

Directories & Feeds

RSS & Integration