Changes for version 0.16 - 2026-06-28

  • Fixes CVE-2026-56017, which caused Perl to SEGFAULT when calling minify(). Thanks to CPANSec for raising the issue, and providing a prototype fix.
  • Fixes CVE-2026-56018, caused by a memory leak in minify() where each tokenized Node's "contents" buffer were not properly freed, resulting in a memory leak on every call.
  • Updated author tests for "does the JS still compile?", to use "node" instead of "jsl".

Modules

XS based JavaScript minifier