VYPR

JavaScript::Minifier::XS

by Perl Foundation

CVEs (1)

  • CVE-2026-56017HigJun 29, 2026
    risk 0.42cvss 7.5epss 0.00

    JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp versus division disambiguator in JsTokenizeString (XS.xs) inspects the previous token's last byte to choose between a…