All 16 CVE vulnerabilities found in QuickJS, with AI-generated Chinese analysis, references, and POCs.
This page aggregates security vulnerabilities affecting QuickJS, a lightweight JavaScript engine developed by Fabrice Bellard, specifically focusing on implementation flaws and language interpreter weaknesses. The collection encompasses a broad spectrum of reported issues, ranging from memory corruption and use-after-free errors to logic bypasses and denial-of-service conditions, covering the product's entire public release history from its initial launch to the present day. Users visiting this resource can track the vendor's security advisories to stay informed about the latest patches, analyze the characteristics of specific weakness classes to improve their own code auditing processes, or review the complete vulnerability history of the QuickJS engine to assess long-term security trends. By centralizing these disparate reports, the page serves as a critical reference for developers, security researchers, and system administrators who rely on this engine for embedded systems or server-side scripting tasks. The data presented here is derived from public disclosures and official vendor communications, ensuring that the information remains accurate and up-to-date without including unverified claims or speculative threats. This comprehensive overview enables stakeholders to make informed decisions regarding the deployment and maintenance of QuickJS in their respective environments while promoting a proactive approach to software security.
Vendor: quickjs-ng
All 16 known CVE vulnerabilities affecting QuickJS with full Chinese analysis, references, and POCs where available.