CVE-2026-61847 in Crass

Prediction

by VulDB Data Team • 10/29/2026

A vulnerability was detected in <a href="/product/crass">Crass</a>. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. Upgrading to version 1.0.7 addresses this issue. You should upgrade the affected component.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Moderation: accepted
• Entry: VDB-428704
• CWE: CWE-674 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-61847
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61847
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-61847/