CSSOM vulnerabilities

1 known vulnerability in CSSOM from NV. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CSSOM: Improperly Controlled Modification of Dynamically-Determined Object Attributes

  CVE-2026-93752Sep 18, 2026NV

  CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to validate reserved property names. Attackers can supply a stylesheet with a declaration named length to replace the internal counter and trigger ex