CVE-2026-93752

Name of the Vulnerable Software and Affected Versions CSSOM versions 0.5.0 and earlier

Description A denial of service issue exists in the setProperty() function of CSSStyleDeclaration due to a failure to validate reserved property names. An attacker can provide a stylesheet containing a declaration named length to overwrite the internal counter. This leads to excessive memory allocation during the serialization of cssText, which results in process termination.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.