Skip to content
OpenAdvisories

Product · @swc

html

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-72925

    SWC HTML minifier may allow script element breakout when minifying embedded JSON

    SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swc_html_minifier 59.0.0, the minifyJson processing in crates/swc_html_minifier/src/lib.rs parsed and serialized attacker-controlled JSON in applicati…

    swc-project @swc swc_html_minifier swc npm crates.io