@swc/html vulnerabilities

CVEs whose affected-version data names the @swc/html package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-72925Medium· 6.1

1mo ago

SWC is a TypeScript / JavaScript compiler written in Rust

SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swc_html_minifier 59.0.0, the minifyJson processing in crates/swc_html_minifier/src/lib.rs parsed and serialized attacker-contro…

▾ Sunlitswc · @swc/htmlEPSS 0.19%via NVD