QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-10268

Back to search

CVE-2026-10268

Published: Jun 1, 2026

Modified: Jun 1, 2026

PUBLISHED

CVSS v3.1

3.3

LOW

Description

A weakness has been identified in janet-lang janet up to 1.41.0. This vulnerability affects the function unmarshal_one_fiber of the file src/core/marsh.c. Executing a manipulation can lead to integer overflow. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be used for attacks. This patch is called d9b1d711ea1fde52ac73a82088b512a3e17bad0d. A patch should be applied to remediate this issue.

VendorProductVersions

janet-lang

janet

affected
1.0
affected
1.1
affected
1.2
affected
1.3
affected
1.4

+37 more versions

Weaknesses (CWE)

CWE-190
CWE-189

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

References

VDB-367547 | CTI Indicators (IOB, IOC, IOA)
signature
permissions-required

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now