Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-09-18T17:51:37 CSSOM: CSSOM: Denial of Service due to improper property name validation 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-770

CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to validate reserved property names. Attackers can supply a stylesheet with a declaration named length to replace the internal counter and trigger excessive memory allocation during cssText serialization, causing process termination.

A flaw was found in CSSOM. This vulnerability allows a remote attacker to trigger a denial of service by providing a specially crafted stylesheet. The issue stems from improper validation of reserved property names within the `CSSStyleDeclaration.setProperty()` function. Exploiting this, an attacker can cause excessive memory allocation during CSS text serialization, leading to the termination of the affected process.

Red Hat Hardened Images Not affected dotnet8.0 Red Hat Hardened Images Not affected grafana12.4 Red Hat Hardened Images Not affected grafana13.1 Red Hat Hardened Images Not affected grafana13.2 Red Hat Hardened Images Not affected prometheus3.13 https://www.cve.org/CVERecord?id=CVE-2026-93752 https://nvd.nist.gov/vuln/detail/CVE-2026-93752 https://github.com/NV/CSSOM https://github.com/NV/CSSOM/blob/00ec21868e12422581c81779135c2f1648441204/lib/CSSStyleDeclaration.js#L112-L124 https://github.com/NV/CSSOM/blob/00ec21868e12422581c81779135c2f1648441204/lib/CSSStyleDeclaration.js#L41-L56 https://github.com/NV/CSSOM/issues/119 https://www.vulncheck.com/advisories/cssom-through-0.5.0-denial-of-service-via-length-property