High severity7.5NVD Advisory· Published Sep 18, 2026· Updated Sep 22, 2026
CVE-2026-93752
CVE-2026-93752
Description
CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to validate reserved property names. Attackers can supply a stylesheet with a declaration named length to replace the internal counter and trigger excessive memory allocation during cssText serialization, causing process termination.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
4- github.com/NV/CSSOM/blob/00ec21868e12422581c81779135c2f1648441204/lib/CSSStyleDeclaration.jsnvd
- github.com/NV/CSSOM/blob/00ec21868e12422581c81779135c2f1648441204/lib/CSSStyleDeclaration.jsnvd
- github.com/NV/CSSOM/issues/119nvd
- www.vulncheck.com/advisories/cssom-through-0.5.0-denial-of-service-via-length-propertynvd
News mentions
0No linked articles in our index yet.