Product · GTERMARS

JavaScript::Minifier::XS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2026-56018

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) the cleanup frees only the NodeSet structures and never the per-token contents buffers allocated in JsSetNodeCo…

GTERMARS JavaScript::Minifier::XS libjavascript-minifier-xs-perl perl-javascript-minifier-xs Debian Ubuntu Alpine

Jun 29, 2026
High 7.5

CVE-2026-56017

JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash

JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp versus division disambiguator in JsTokenizeString (XS.xs) inspects the previous token's last byte …

GTERMARS JavaScript::Minifier::XS perl-javascript-minifier-xs libjavascript-minifier-xs-perl Debian Ubuntu Alpine

Jun 29, 2026