Jsish

jsish

Vendor: Jsish • 53 CVEs

CVEs (53)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-65570 1Jsish 1Jsish Jun 17, 2026 Dec 29, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instruct...Show more A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather than consuming it during OP_INSTANCEOF. As a result, OP_NEXT interprets the array as an iterator object and reads the iterCmd function pointer from an invalid structure, potentially causing a crash or enabling code execution depending on heap layout.Show less
CVE-2024-24189 1Jsish 1Jsish Jun 17, 2026 Feb 7, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c.
CVE-2024-24188 1Jsish 1Jsish Jun 17, 2026 Feb 7, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c.
CVE-2024-24186 1Jsish 1Jsish Jun 17, 2026 Feb 7, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Jsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c.
CVE-2020-23260 1Jsish 1Jsish Jun 17, 2026 Apr 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file.
CVE-2020-23259 1Jsish 1Jsish Jun 17, 2026 Apr 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file.
CVE-2020-23258 1Jsish 1Jsish Jun 17, 2026 Apr 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the Jsi_ValueIsNumber function in ./src/jsiValue.c file.
CVE-2021-46507 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a stack overflow via Jsi_LogMsg at src/jsiUtils.c.
CVE-2021-46506 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There is an Assertion 'v->d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0.
CVE-2021-46505 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5b1e5.
CVE-2021-46504 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0.
CVE-2021-46503 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x79732. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46502 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5166d. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46501 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46500 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ArgTypeCheck in src/jsiFunc.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46499 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueCopyMove in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46498 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_wswebsocketObjFree in src/jsiWebSocket.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46497 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_UserObjDelete in src/jsiUserObj.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46496 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_ObjFree in src/jsiObj.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46495 1Jsish 1Jsish Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. This vulnerability can lead to a Denial of Service (DoS).

12 3 Next