Priority HIGH 82
A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT opcode.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00528 · Published 2025-12-29 · No fix listed CWE-843
Priority HIGH 76
Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00686 · Published 2024-02-07 · No fix listed CWE-416
Priority MEDIUM 50
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.008 · Published 2024-02-07 · No fix listed CWE-787
Priority HIGH 82
Jsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00879 · Published 2024-02-07 · No fix listed CWE-787
Priority MEDIUM 40
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00766 · Published 2023-04-04 · No fix listed CWE-787
Priority HIGH 72
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00766 · Published 2023-04-04 · No fix listed CWE-476
Priority LOW 35
An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the Jsi_ValueIsNumber function in ./src/jsiValue.c file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00999 · Published 2023-04-04 · No fix listed CWE-787
Priority LOW 26
Jsish v3.5.0 was discovered to contain a stack overflow via Jsi_LogMsg at src/jsiUtils.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00607 · Published 2022-01-27 · No fix listed CWE-674
Priority LOW 26
There is an Assertion 'v->d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00607 · Published 2022-01-27 · No fix listed CWE-617
Priority LOW 26
Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5b1e5.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00607 · Published 2022-01-27 · No fix listed CWE-674
Priority LOW 26
There is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00607 · Published 2022-01-27 · No fix listed CWE-617
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x79732.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00638 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5166d.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00664 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00638 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ArgTypeCheck in src/jsiFunc.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00638 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueCopyMove in src/jsiValue.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00638 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_wswebsocketObjFree in src/jsiWebSocket.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00638 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_UserObjDelete in src/jsiUserObj.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00638 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_ObjFree in src/jsiObj.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00664 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00638 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueLookupBase in src/jsiValue.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00638 · Published 2022-01-27 · No fix listed CWE-416
Priority LOW 26
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_FunctionInvoke at src/jsiFunc.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00565 · Published 2022-01-27 · No fix listed
Priority LOW 26
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_CommandPkgOpts at src/jsiCmds.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00607 · Published 2022-01-27 · No fix listed
Priority LOW 26
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00607 · Published 2022-01-27 · No fix listed
Priority LOW 26
Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_DecrRefCount in src/jsiValue.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00638 · Published 2022-01-27 · No fix listed CWE-416
Load more
THREATIST.IORead the docs