Repository navigation
Security: tdewolff/minify
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Unbounded recursion in CSS function minification causes a stack-overflow crash on deeply nested functionsGHSA-jqpj-jqr2-gf8w published
Nov 3, 2026 by tdewolffModerate -
Incomplete fix of GHSA-3ppm: JS minifier still emits script breakout (</script + whitespace or /) -> XSSGHSA-5j49-m7mw-96hf published
Oct 26, 2026 by tdewolffModerate -
JS minifier can emit a literal </script> from escaped strings (XSS in inlined scripts)GHSA-3ppm-p7r9-c5w3 published
Oct 14, 2026 by tdewolffModerate
Learn more about advisories related to tdewolff/minify in the GitHub Advisory Database