VULNRABLE / Vulnerability / CVE-2026-72925
CVE-2026-72925
MEDIUM LOW @swc/html GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
0%
Source
GHSA
Summary
SWC HTML minifier may allow script element breakout when minifying embedded JSON
What this means
CVE-2026-72925 is a medium-severity vulnerability affecting @swc/html, rated CVSS 5.5. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published September 8, 2026.
View full advisory at GHSA →