Описание
Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters.
The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption.
Note that the minify_utf8 function is an alias for minify.
Ссылки
- Third Party Advisory
- ProductRelease Notes
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.3.0 (включая) до 0.7.8 (исключая)
cpe:2.3:a:rrwo:text\:\:minify\:\:xs:*:*:*:*:*:perl:*:*
EPSS
Процентиль: 36%
0.00436
Низкий
7.5 High
CVSS3
Дефекты
CWE-122
EPSS
Процентиль: 36%
0.00436
Низкий
7.5 High
CVSS3
Дефекты
CWE-122