rpm package
opensuse/perl-JavaScript-Minifier-XS&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/perl-JavaScript-Minifier-XS&distro=openSUSE%20Tumbleweed
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-56018 | Hig | 7.5 | < 0.160.0-1.1 | 0.160.0-1.1 | Jun 29, 2026 | JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) the cleanup frees only the NodeSet structures and never the per-token contents buffers allocated in JsSetNodeContents; JsDiscardNod | |
| CVE-2026-56017 | Hig | 7.5 | < 0.160.0-1.1 | 0.160.0-1.1 | Jun 29, 2026 | JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp versus division disambiguator in JsTokenizeString (XS.xs) inspects the previous token's last byte to choose between a |
- affected < 0.160.0-1.1fixed 0.160.0-1.1
JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) the cleanup frees only the NodeSet structures and never the per-token contents buffers allocated in JsSetNodeContents; JsDiscardNod
- affected < 0.160.0-1.1fixed 0.160.0-1.1
JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp versus division disambiguator in JsTokenizeString (XS.xs) inspects the previous token's last byte to choose between a