CVE-2025-65570

A type confusion vulnerability exists in jsish 2.0 , a small JavaScript parser written in C. The flaw occurs during the execution of the OP_NEXT opcode when an instanceof expression uses an array element access as the left-hand operand within a for-in loop. The implementation fails to consume an ...