CVE-2026-13593

Summary

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away.

The minify function has a memory leak when processing a document containing only characters to be removed, such as comments and whitespace.

Affected Software

Weaknesses

• CWE-401: CWE-401 Missing Release of Memory after Effective Lifetime

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2026/06/29/18

References

• https://metacpan.org/release/GTERMARS/CSS-Minifier-XS-0.14/changes

• ←Previous
• Next→