SWC HTML minifier may allow script element breakout when minifying embedded JSON

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-72925 · CVE overview and exploitation status

EUVD-2026-56179

GHSA-5qr2-v392-m9g8

cve-program · CVE-2026-72925

• https://github.com/swc-project/swc/security/advisories/GHSA-5qr2-v392-m9g8
• https://github.com/swc-project/swc/pull/12080
• https://github.com/swc-project/swc/commit/e1877b44bdac8abc9fd51e984d584f40f6999832
• https://github.com/swc-project/swc/releases/tag/v1.15.47
• https://github.com/swc-project/swc/releases/tag/v1.15.47-nightly-20260729.1

euvd · EUVD-2026-56179

• https://github.com/swc-project/swc/security/advisories/GHSA-5qr2-v392-m9g8
• https://github.com/swc-project/swc/pull/12080
• https://github.com/swc-project/swc/commit/e1877b44bdac8abc9fd51e984d584f40f6999832
• https://github.com/swc-project/swc/releases/tag/v1.15.47
• https://github.com/swc-project/swc/releases/tag/v1.15.47-nightly-20260729.1

nvd · CVE-2026-72925

• https://github.com/swc-project/swc/commit/e1877b44bdac8abc9fd51e984d584f40f6999832
• https://github.com/swc-project/swc/pull/12080
• https://github.com/swc-project/swc/releases/tag/v1.15.47
• https://github.com/swc-project/swc/releases/tag/v1.15.47-nightly-20260729.1
• https://github.com/swc-project/swc/security/advisories/GHSA-5qr2-v392-m9g8

osv · GHSA-5qr2-v392-m9g8

• https://github.com/swc-project/swc/security/advisories/GHSA-5qr2-v392-m9g8
• https://nvd.nist.gov/vuln/detail/CVE-2026-72925
• https://github.com/swc-project/swc/pull/12080
• https://github.com/swc-project/swc/commit/e1877b44bdac8abc9fd51e984d584f40f6999832
• https://github.com/swc-project/swc
• https://github.com/swc-project/swc/releases/tag/v1.15.47
• https://github.com/swc-project/swc/releases/tag/v1.15.47-nightly-20260729.1

No related changes are available here.