CVE-2022-37620: Kangax Html-Minifier

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression.

Affected products

• Kangax Html-Minifier: up to and including 4.0.0
• Terser Html-Minifier-Terser: up to and including 7.2.0

Published 2022-10-31. Last modified 2026-06-17.