VYPR

JavaScript::Minifier::XS

by Perl Foundation

CVEs (1)

  • CVE-2026-56018Jun 30, 2026
    risk 0.00cvss epss

    JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) the cleanup frees only the NodeSet structures and never the per-token contents buffers allocated in JsSetNodeContents;…