VYPR

libcss

by Netsurf Browser

CVEs (1)

  • CVE-2026-116740MedOct 26, 2026
    risk 0.35cvss 6.5epss —

    libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote attackers to crash consumers by supplying media lists ending in a comma. Attackers can serve a stylesheet whose @media or @import media list has a trailing comma,…