quickjs
Security Risk Profile
54
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 23, 2024 to present
12
Total CVEs
7
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
54/100
medium
Severity Distribution
Critical
0High
7Medium
4Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Use After Free
3
2
Buffer Overflow
2
3
Integer Overflow
2
4
Integer Underflow
1
5
Null Pointer Dereference
1
Most Affected Products
1. Quickjs Project Quickjs10
2. QuickJS QuickJS9
3. debian/quickjs3
4. Bellard Quickjs2
5. QuickJS QuickJS engine2
Recent Vulnerabilities
See more →CVE-2025-69653
CVSS 6.5medium
3/6/2026🔧 No Patch
CVE-2025-12745
CVSS 7.8high
QuickJS quickjs.c js_array_buffer_slice buffer over-read
11/5/2025
CVE-2025-62496
CVSS 8.8high
Integer overflow in js_bigint_from_string in QuickJS
10/16/2025🔧 No Patch
CVE-2025-62495
CVSS 8.8high
Type confusion in string addition in QuickJS
10/16/2025🔧 No Patch
CVE-2025-62493
CVSS 6.5medium
Heap out-of-bounds read in js_bigint_to_string1 in QuickJS
10/16/2025🔧 No Patch
CVE-2025-62492
CVSS 6.5medium
Heap out-of-bounds read in js_typed_array_indexOf in QuickJS
10/16/2025🔧 No Patch
CVE-2025-62491
CVSS 8.8high
Use-after-free in js_std_promise_rejection_check in QuickJS
10/16/2025🔧 No Patch
CVE-2025-62490
CVSS 8.8high
Use-after-free in js_print_object in QuickJS
10/16/2025🔧 No Patch
CVE-2025-46688
CVSS 8.4EPSS 0%high
4/27/2025
CVE-2024-33263
CVSS 4.0EPSS 0%medium
4/26/2024
Monitor quickjs in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.