CVE-2026-13593: Gtermars Css::minifier::xs

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minify function has a memory leak when processing a document containing only characters to be removed, such as comments and whitespace.

Affected products

• Gtermars Css::minifier::xs: before 0.14 (fixed in 0.14)

Published 2026-06-29. Last modified 2026-06-30.