[Git][security-tracker-team/security-tracker][master] Add CVE-2026-53727/ruby-css-parser

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
90739505 by Salvatore Bonaccorso at 2026-07-18T16:23:20+02:00
Add CVE-2026-53727/ruby-css-parser

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -96,7 +96,10 @@ CVE-2026-54163 (secure_headers manages application of security headers with many
 CVE-2026-54159 (PrestaShop ps_facetedsearch is a module that adds layered navigation f ...)
 	NOT-FOR-US: PrestaShop
 CVE-2026-53727 (css_parser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssParser::Pa ...)
-	TODO: check
+	- ruby-css-parser 3.0.0-1
+	NOTE: https://github.com/premailer/css_parser/security/advisories/GHSA-9pmc-p236-855h
+	NOTE: Fixed by: https://github.com/premailer/css_parser/commit/7d2ddf0189cd54b54f378f59daefa10cb036e476 (v3.0.0)
+	NOTE: Fixed by: https://github.com/premailer/css_parser/commit/e0a151458b2a801ae265ba420862ef8b1127b3ae (v3.0.0)
 CVE-2026-52584 (Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a l ...)
 	TODO: check
 CVE-2026-52348 (cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/907395057d872f624db10543d819d5dcc861fb16

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/907395057d872f624db10543d819d5dcc861fb16
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260718/c8b9299c/attachment.htm>