Threats Tagged 'cve-2026-53727'
View all threats tagged with 'cve-2026-53727'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-53727'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-9pmc-p236-855h: Ruby CSS Parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file`CVE-2026-53727 0 The Ruby css_parser library's Parser#read_remote_file method allows Server-Side Request Forgery (SSRF) and local file disclosure due to lack of validation on URI schemes, hosts, and IP addresses. It follows HTTP redirects recursively, including cross-scheme redirects to file:// URIs, enabling arbitrary local file reads. Applications using css_parser with attacker-controlled CSS and the base_uri option, such as Premailer, are vulnerable. The vulnerability permits arbitrary HTTP/HTTPS requests to internal and external hosts, local file existence enumeration, and potential local file content disclosure constrained by CSS grammar. Additionally, forced decompression of attacker-controlled gzip payloads can cause resource exhaustion. No patch or official fix is currently documented. Join the discussion | GCVE Database | 07/09/2026, 13:43:13 UTC Added: 07/10/2026, 09:26:32 UTC |
Showing 1 to 1 of 1 result