CVE Intelligence

Vulnerabilidades de Swc-project

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Swc-project: 1 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-72925 Média · 6.1 CWE-79 11/08/2026
SWC HTML minifier may allow script element breakout when minifying embedded JSON
SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swc_html_minifier 59.0.0, the minifyJson processing in crates/swc_html_minifier/src/lib.rs parsed and serialized attacker-controlled JSON in application/json and application/ld+json script elements without the escape_json_for_html_script behavior to re-escape less-than signs, allowing a closing script sequence to terminate the element early and execute script in the generated page's origin. This issue is fixed in @swc/html 1.15.47-nightly-20260729.1 and swc_html_minifier 59.0.0.