VYPR

CSSOM

by NV

CVEs (1)

  • CVE-2026-93752HigSep 18, 2026
    risk 0.49cvss 7.5epss 0.01

    CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to validate reserved property names. Attackers can supply a stylesheet with a declaration named length to replace the internal counter and trigger excessive memory…