VYPR

JavaScript-Minifier-XS

by Bleargh45

CVEs (1)

  • CVE-2026-56018HigJun 29, 2026
    risk 0.42cvss 7.5epss 0.00

    JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) the cleanup frees only the NodeSet structures and never the per-token contents buffers allocated in JsSetNodeContents;…