CVE-2026-61846 in Crass

Prediction

by VulDB Data Team • 10/29/2026

A vulnerability was detected in <a href="/product/crass">Crass up to 1.0.6</a>. This affects an unknown part of the component <em>CSS Parser</em>. The manipulation results in uncontrolled memory allocation. The attack may be launched remotely. Upgrading to version 1.0.7 is able to mitigate this issue. Upgrading the affected component is advised.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Moderation: accepted
• Entry: VDB-428695
• CWE: CWE-789 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-61846
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61846
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-61846/