Skip to content
OpenAdvisories
High · 7.5 CVE-2026-7040 EUVD-2026-25833

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have heap overflow when processing some malformed UTF-8 characters

Published Apr 27, 2026 · Updated May 1, 2026 · Assigned by CPANSec

Description

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters.

The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption.

Note that the minify_utf8 function is an alias for minify.

Affected products

VendorProductAffectedFixed
RRWO Text::Minify::XS 0.3.0 – < 0.7.8 0.7.8

References