Packages / Alpine Linux 3.21 / Source / perl-javascript-minifier-xs

Vulnerabilità note

CVEGravitàImpatto per versione
[CVE-2026-56018]

Published:

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) the cleanup frees only the NodeSet structures and n

High(7.5)Sconosciuto
Dettagli (4)

  • 0.15-r4 · aarch64 · v3.21

    Sconosciuto · Corretta: 0.16-r0

    Version impact unknown

    pypi · perl-javascript-minifier-xs · alpine · 3.24

  • 0.15-r4 · x86_64 · v3.21

    Sconosciuto · Corretta: 0.16-r0

    Version impact unknown

    pypi · perl-javascript-minifier-xs · alpine · 3.24

  • 0.15-r4 · aarch64 · v3.21

    Sconosciuto · Corretta: 0.16-r0

    Version impact unknown

    pypi · perl-javascript-minifier-xs · alpine · 3.24

  • 0.15-r4 · x86_64 · v3.21

    Sconosciuto · Corretta: 0.16-r0

    Version impact unknown

    pypi · perl-javascript-minifier-xs · alpine · 3.24

[CVE-2026-56017]

Published:

JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp versus division disambiguator in JsTok

High(7.5)Sconosciuto
Dettagli (4)

  • 0.15-r4 · aarch64 · v3.21

    Sconosciuto · Corretta: 0.16-r0

    Version impact unknown

    pypi · perl-javascript-minifier-xs · alpine · 3.24

  • 0.15-r4 · x86_64 · v3.21

    Sconosciuto · Corretta: 0.16-r0

    Version impact unknown

    pypi · perl-javascript-minifier-xs · alpine · 3.24

  • 0.15-r4 · aarch64 · v3.21

    Sconosciuto · Corretta: 0.16-r0

    Version impact unknown

    pypi · perl-javascript-minifier-xs · alpine · 3.24

  • 0.15-r4 · x86_64 · v3.21

    Sconosciuto · Corretta: 0.16-r0

    Version impact unknown

    pypi · perl-javascript-minifier-xs · alpine · 3.24

Ultima sincronizzazione:

[Catalogo CVE]

Fonti

  • Alpine Linux 3.21 main aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    v3-21-main-aarch64:0bfada7396542aedf9b36ce973478a7454b364e1ef3b199e425ebd177204bbd9

    Repository-signature verification record
    Signed-object SHA-256
    742699ce2fb72715ef61fdcf59d93061c609f5ac858daf0f7a1e286668228d3c
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Alpine Linux 3.21 main x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    v3-21-main-x86-64:49a0d9e44922d1fe8a10e81c96033ba453a7303b441fba4a74a8166f795f63b6

    Repository-signature verification record
    Signed-object SHA-256
    2762702c22e675442b2015e18f496051e4dc0331ee27b5f24f8cd34807574f06
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026