quickjs-ng
Security Risk Profile
55
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 21, 2025 to present
8
Total CVEs
8
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
8.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
55/100
medium
Severity Distribution
Critical
1High
7Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
6Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
7
2
Code Injection
1
3
Use After Free
1
Most Affected Products
1. quickjs-ng quickjs8
2. npm/quickjs-ng/quickjs3
3. Fabrice Bellard QuickJS2
4. quickjs-ng QuickJS-NG1
5. npm/quickjs-ng1
Recent Vulnerabilities
See more →CVE-2026-37630
CVSS 7.3high
5/11/2026🔧 No Patch
CVE-2026-1145
CVSS 8.8EPSS 0%high
quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow
1/19/2026
CVE-2026-1144
CVSS 8.8EPSS 0%high
quickjs-ng quickjs Atomics Ops quickjs.c use after free
1/19/2026
CVE-2026-0822
CVSS 8.8EPSS 0%high
quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow
1/10/2026
CVE-2026-0821
CVSS 9.8EPSS 0%critical
quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow
1/10/2026
CVE-2025-46687
CVSS 7.8EPSS 0%high
4/27/2025
CVE-2025-46688
CVSS 8.4EPSS 0%high
4/27/2025
CVE-2024-13903
CVSS 7.5high
quickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflow
3/21/2025
Monitor quickjs-ng in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.