CVE-2026-93752 – CSSOM through 0.5.0 Denial of Service via length Property

​CVE ID :CVE-2026-93752

Published : Sept. 18, 2026, 5:51 p.m. | 37 minutes ago

Description :CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to validate reserved property names. Attackers can supply a stylesheet with a declaration named length to replace the internal counter and trigger excessive memory allocation during cssText serialization, causing process termination.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More