From 2c624c067692c2982f107cafdf4c5a3fa8ffe893 Mon Sep 17 00:00:00 2001
From: Michael Grosser <michael@grosser.it>
Date: Tue, 18 Aug 2026 21:40:54 -0700
Subject: [PATCH] fix css_parser CVE-2026-53727

---
 gems/css_parser/CVE-2026-53727.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/gems/css_parser/CVE-2026-53727.yml b/gems/css_parser/CVE-2026-53727.yml
index 729073812f..160664b672 100644
--- a/gems/css_parser/CVE-2026-53727.yml
+++ b/gems/css_parser/CVE-2026-53727.yml
@@ -22,8 +22,6 @@ description: |
   example — is exposed. The attacker only needs the ability to land one
   @import url(...) in the CSS that the host application parses.
 cvss_v4: 8.9
-unaffected_versions:
-  - "< 2.2.0"
 patched_versions:
   - ">= 3.0.0"
 related: