NV CSSOM vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting NV CSSOM: 1 record(s), with affected versions and fixes.

CVE-2026-93752 High · 7.5 CWE-915 Sep 18, 2026

CSSOM through 0.5.0 Denial of Service via length Property

CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to validate reserved property names. Attackers can supply a stylesheet with a declaration named length to replace the internal counter and trigger excessive memory allocation during cssText serialization, causing process termination.