quickjs vulnerabilities — 31 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
High Heap-use-after-free Vulnerability in QuickJS Package quickjs OSS-Fuzz 18 May 2026 d73189dd5a582c19c565774bd56fed4e72d33c99
High Heap-Use-After-Free Vulnerability in QuickJS: Critical Security Flaw quickjs OSS-Fuzz 09 May 2026 e182e3df5c51017a7faa97a654b3f2b9c6330448
High Critical UNKNOWN WRITE Vulnerability in QuickJS Package quickjs OSS-Fuzz 29 Dec 2025 No fix published
Medium Stack Buffer Overflow Vulnerability in QuickJS - OSV-2025-1018 quickjs OSS-Fuzz 25 Dec 2025 No fix published
Medium Use-of-Uninitialized-Value Vulnerability in QuickJS quickjs OSS-Fuzz 24 Dec 2025 No fix published
Medium Heap Buffer Overflow Vulnerability in QuickJS quickjs OSS-Fuzz 29 Nov 2025 b22685617750e51d95f643d8eb1382dd09dd3bf1
High Heap-Use-After-Free Vulnerability in QuickJS: Critical Security Flaw quickjs OSS-Fuzz 08 Nov 2025 fcbf5ea2a63510f35f9ab2baadd59781be16a167
Medium Use-of-Uninitialized-Value Vulnerability in QuickJS quickjs OSS-Fuzz 06 Nov 2025 080c01f34696351d21f34f99081e93adb41ae74a
Medium Uninitialized Value Vulnerability in QuickJS: Use-of-Uninitialized-Value in js_create_function quickjs OSS-Fuzz 20 Oct 2025 080c01f34696351d21f34f99081e93adb41ae74a
High Heap-Use-After-Free Vulnerability in QuickJS: Critical Security Flaw quickjs OSS-Fuzz 14 Oct 2025 080c01f34696351d21f34f99081e93adb41ae74a
Medium Use-of-Uninitialized-Value Vulnerability in QuickJS Package quickjs OSS-Fuzz 08 Oct 2025 eb9fa2b8dac0c7a431ef5255fb55943da78d2f3a
Medium Heap Buffer Overflow Vulnerability in QuickJS Package quickjs OSS-Fuzz 09 Jul 2025 fa628f8c523ecac8ce560c081411e91fcaba2d20
Medium Heap Buffer Overflow Vulnerability in QuickJS Package quickjs OSS-Fuzz 05 Jul 2025 20d2b404af65edc5d66ee6f11a59f930ea3d1b88
Medium Use-of-Uninitialized-Value Vulnerability in QuickJS Package quickjs OSS-Fuzz 03 Jul 2025 2d99c323a27ca9013230cfd6fb56ab37f2a0f1d4
Medium Uninitialized Value Use in QuickJS: JS_FreeRuntime Vulnerability quickjs OSS-Fuzz 23 May 2025 bb986e55ff563ea9791d1a98450c3ca57e88366c
Medium Uninitialized Value Use in QuickJS: JS_FreeRuntime Vulnerability quickjs OSS-Fuzz 10 May 2025 1021e3c7297cbe1f5e5f3ebbc6ee7a25b4095d52
Medium Heap Buffer Overflow in QuickJS: Critical Vulnerability Detected quickjs OSS-Fuzz 09 May 2025 1021e3c7297cbe1f5e5f3ebbc6ee7a25b4095d52
High Heap-Use-After-Free Vulnerability in QuickJS: Critical Memory Management Flaw quickjs OSS-Fuzz 05 May 2025 11d076fac6691da27df021872cdb12ec44d022e6
Medium Uninitialized Value Vulnerability in QuickJS: JS_DefineProperty Crash Risk quickjs OSS-Fuzz 04 May 2025 11d076fac6691da27df021872cdb12ec44d022e6
Medium Heap-buffer-overflow in JS_CallInternal in quickjs quickjs OSS-Fuzz 30 Apr 2024 d378a9f3a583cb787c390456e27276d0ee377d23
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.