CVE-2026-14650

Name of the Vulnerable Software and Affected Versions connorskees grass versions prior to 0.13.5

Description A flaw in the UTF-8 Character Handler component allows local execution of a manipulation that can lead to a denial of service. The issue resides in the grass compiler::raw to parse error() function.

Recommendations Update to version 0.13.5 or later. As a temporary workaround, restrict local access to the grass compiler::raw to parse error() function.