EUVD-2026-56179

SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swchtmlminifier 59.0.0, the minifyJson processing in crates/swchtmlminifier/src/lib.rs parsed and serialized attacker-controlled JSON in application/json and application/ld+json script...

CVE-2026-72925

CVE-2026-72925 affects SWC’s HTML minification path. The issue in minifyJson within crates/swc_html_minifier/src/lib.rs allowed attacker-controlled JSON inside application/json and application/ld+json script elements to be parsed/serialized without proper HTML escaping, enabling a closing script ...

ROOT-APP-NPM-CVE-2022-37620 CVE-2022-37620 in @rootio/html-minifier - Patched by Root

Root has patched CVE-2022-37620 in the @rootio/html-minifier package for Root:npm. Multiple fixed versions available...

EUVD-2022-7144

Malicious code in bioql PyPI...

CVE-2022-37620

A Regular Expression Denial of Service ReDoS flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression...

01-dev (=1.0.0), 04-musicplayer (=1.0.0) +23455 more potentially affected by CVE-2022-37620 via html-minifier (>=0.4.5 <=4.0.0)

html-minifier NPM version =0.4.5, =4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on html-minifier and may be impacted: - 01-dev =1.0.0 - 04-musicplayer =1.0.0 - 06demo-1 =1.0.0 - 0726react =0.1.1 - 0xgank-tea-advice-pull =1.0.0 -...

GHSA-PFQ8-RQ6V-VF5M kangax html-minifier REDoS vulnerability

A Regular Expression Denial of Service ReDoS flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression...

kangax html-minifier REDoS vulnerability

A Regular Expression Denial of Service ReDoS flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression...

CVE-2022-37620

A Regular Expression Denial of Service ReDoS flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression...

Hardcoded credentials

A Regular Expression Denial of Service ReDoS flaw was found in kangax html-minifier 4.0.0 via the candidate variable in htmlminifier.js...

CVE-2022-37620

CVE-2022-37620: ReDoS in kangax/html-minifier 4.0.0 due to reCustomIgnore regex. CVSS v3.1 base score 7.5 (HIGH); attack vector NETWORK, complexity LOW, no privileges required, no user interaction; impact: Availability loss. Remediation: upgrade/downgrade to a non-vulnerable/html-minifier version...

CVE-2022-37620

A Regular Expression Denial of Service ReDoS flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression...

CVE-2022-37620

A Regular Expression Denial of Service ReDoS flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression...

CVE-2022-37620

A Regular Expression Denial of Service ReDoS flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression...

PT-2022-24031

Name of the Vulnerable Software and Affected Versions kangax html-minifier version 4.0.0 Description A Regular Expression Denial of Service ReDoS flaw was found in the candidate variable in htmlminifier.js. This issue can cause a denial of service. Recommendations For kangax html-minifier version...