q
quickjs
Security Risk Profile
72
/100
highSecurity Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 23, 2024 to present
13
Total CVEs
8
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
72/100
high
📈 1 in Last 30 Days
Severity Distribution
Critical
1High
7Medium
4Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Use After Free
3
2
Buffer Overflow
2
3
Integer Overflow
2
4
Integer Underflow
1
5
Null Pointer Dereference
1
Most Affected Products
1. QuickJS QuickJS10
2. Quickjs Project Quickjs10
3. debian/quickjs3
4. Bellard Quickjs2
5. QuickJS QuickJS engine2
Recent Vulnerabilities
See more →CVE-2026-88378
CVSS 9.8critical
Sep 24, 2026🔧 No Patch
CVE-2025-69653
CVSS 6.5medium
Mar 6, 2026🔧 No Patch
CVE-2025-12745
CVSS 7.8high
QuickJS quickjs.c js_array_buffer_slice buffer over-read
Nov 5, 2025
CVE-2025-62496
CVSS 8.8high
Integer overflow in js_bigint_from_string in QuickJS
Oct 16, 2025🔧 No Patch
CVE-2025-62495
CVSS 8.8high
Type confusion in string addition in QuickJS
Oct 16, 2025🔧 No Patch
CVE-2025-62493
CVSS 6.5medium
Heap out-of-bounds read in js_bigint_to_string1 in QuickJS
Oct 16, 2025🔧 No Patch
CVE-2025-62492
CVSS 6.5medium
Heap out-of-bounds read in js_typed_array_indexOf in QuickJS
Oct 16, 2025🔧 No Patch
CVE-2025-62491
CVSS 8.8high
Use-after-free in js_std_promise_rejection_check in QuickJS
Oct 16, 2025🔧 No Patch
CVE-2025-62490
CVSS 8.8high
Use-after-free in js_print_object in QuickJS
Oct 16, 2025🔧 No Patch
CVE-2025-46688
CVSS 8.4EPSS 0%high
Apr 27, 2025
Monitor quickjs in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.