Vulnerabilities

TI-2026-40413 CVE-2026-56018 · GHSA-fvxv-8c37-qrc6

Uncontrolled resource consumption in GTERMARS JavaScript::Minifier::XS

MEDIUM 40

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-06-29 Fixed in 0.16 CWE-400

TI-2026-40412 CVE-2026-56017 · GHSA-72fp-jmq3-p5xj

LOW 39

JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-06-29 Fixed in 0.16 CWE-125

TI-2026-11516 CVE-2026-13593 · GHSA-89gv-4m9m-97p2

LOW 35

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00292 Published 2026-06-29 Fixed in 0.14 CWE-401