CVE-2026-13593

Description

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minify function has a memory leak when processing a document containing only characters to be removed, such as comments and whitespace.

CVSS Vector

References

• https://metacpan.org/release/GTERMARS/CSS-Minifier-XS-0.14/changes
• http://www.openwall.com/lists/oss-security/2026/06/29/18