CyberSecBulletin

Rgrove vulnerabilities

We track 1 vulnerability in Rgrove products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

1vulnerabilities
0critical
1high
0exploited
8.9average CVSS score

Latest Rgrove vulnerabilities

  • 8.9 High severity

    crass: Memory Allocation with Excessive Size Value

    CVE-2026-61845Rgrove

    Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts `CSS scientific notation` number values with unbounded exponentiation before clamping the result to `Float::MAX`. Applications that use