Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
GTERMARS records in CISA KEVNo GTERMARS vulnerabilities are listed in CISA KEV.
Priority MEDIUM 40
JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00609 · Published 2026-06-29 · Fixed in 0.16 CWE-400
Priority LOW 39
JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00488 · Published 2026-06-29 · Fixed in 0.16 CWE-125
Priority LOW 35
CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00292 · Published 2026-06-29 · Fixed in 0.14 CWE-401
