CVE-2026-7040 in Text::Minify::XSinfo

Zusammenfassung

von MITRE • 27.04.2026

Text::Minify::XS versions from v0.3.0 before v0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters.

The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption.

Note that the minify_utf8 function is an alias for minnify.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Zuständig

CPANSec

Reservieren

25.04.2026

Veröffentlichung

27.04.2026

Moderieren

akzeptiert

Eintrag

VDB-359790

CPE

bereit

EPSS

0.00054

KEV

nein

Aktivitäten

very low

Quellen

Might our Artificial Intelligence support you?

Check our Alexa App!