CVE-2026-56017

The JavaScript::Minifier::XS Perl module (versions before 0.16 ) is vulnerable to a NULL pointer dereference crash within the JsTokenizeString function in XS.xs. The issue occurs when the first meaningful token of the input is a slash; the disambiguator fails to find a preceding token, causing a ...