OSV-2026-1309 Heap-buffer-overflow in janet_bytecode_movopt_basic_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=563659412 Crash type: Heap-buffer-overflow READ 4 Crash state: janetbytecodemovoptbasicblock janetbytecodemovoptfull janetbytecodeoptimize...

PT-2026-105766

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=563659412 Crash type: Heap-buffer-overflow READ 4 Crash state: janet bytecode movopt basic block janet bytecode movopt full janet bytecode optimize...

janet:fuzz_compile: Heap-buffer-overflow in janet_bytecode_movopt_basic_block

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=5374445406191616 Project: janet Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanjanet Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7abf99a0689c Crash...

OSV-2026-1297 UNKNOWN READ in janet_to_string_b

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562551214 Crash type: UNKNOWN READ Crash state: janettostringb janetformatbv janetpanicf...

PT-2026-99753

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562551214 Crash type: UNKNOWN READ Crash state: janet to string b janet formatbv janet panicf...

janet:fuzz_dobytes: Crash in janet_to_string_b

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=6347734723133440 Project: janet Fuzzing Engine: libFuzzer Fuzz Target: fuzzdobytes Job Type: libfuzzerubsanjanet Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x789e00000054 Crash Stat...

janet:fuzz_dobytes: Heap-use-after-free in janet_hash

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=5371459728637952 Project: janet Fuzzing Engine: libFuzzer Fuzz Target: fuzzdobytes Job Type: libfuzzerasanjanet Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x75b5de8c56...

janet:fuzz_dobytes: Heap-use-after-free in janet_ev_default_threaded_callback

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=4589012149665792 Project: janet Fuzzing Engine: libFuzzer Fuzz Target: fuzzdobytes Job Type: libfuzzerasanjanet Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x75a2225c12...

janet:fuzz_dobytes: Heap-buffer-overflow in make_struct_n

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=5622419499581440 Project: janet Fuzzing Engine: libFuzzer Fuzz Target: fuzzdobytes Job Type: libfuzzerasanjanet Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

janet:fuzz_dobytes: Heap-use-after-free in janet_ev_default_threaded_callback

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=4676882919129088 Project: janet Fuzzing Engine: libFuzzer Fuzz Target: fuzzdobytes Job Type: libfuzzerasanjanet Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x759f62a734...

janet:fuzz_dobytes: Crash in janet_hash

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=4504639647842304 Project: janet Fuzzing Engine: libFuzzer Fuzz Target: fuzzdobytes Job Type: libfuzzerubsanjanet Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7e7e7e7e7e7a Crash Stat...

janet:fuzz_dobytes: Stack-buffer-overflow in janet_fiber_reset

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=6451658381656064 Project: janet Fuzzing Engine: afl Fuzz Target: fuzzdobytes Job Type: aflasanjanet Platform Id: linux Crash Type: Stack-buffer-overflow READ 16 Crash Address: 0x76457699e968 Crash...

janet:fuzz_dobytes: Crash in janet_bytecode_remove_noops

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=5398699837292544 Project: janet Fuzzing Engine: honggfuzz Fuzz Target: fuzzdobytes Job Type: honggfuzzasanjanet Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x753ecb908818 Crash State...

janet:fuzz_dobytes: Heap-use-after-free in os_exit

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=4675752218656768 Project: janet Fuzzing Engine: honggfuzz Fuzz Target: fuzzdobytes Job Type: honggfuzzasanjanet Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x78914caeb2...

SUSE CVE-2026-10267

A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bounds read. Attacking locally is a requirement. The exploit has been released to the public and may be used for attack...

SUSE CVE-2026-10268

A weakness has been identified in janet-lang janet up to 1.41.0. This vulnerability affects the function unmarshalonefiber of the file src/core/marsh.c. Executing a manipulation can lead to integer overflow. It is possible to launch the attack on the local host. The exploit has been made availabl...

CVE-2026-10268

A flaw was found in janet-lang janet. A local attacker can trigger an integer overflow in the unmarshalonefiber function. This vulnerability could lead to a denial of service DoS, making the application unavailable to legitimate users...

CVE-2026-10267

A flaw was found in Janet. A local attacker could exploit an out-of-bounds read vulnerability in the doframe function within src/core/debug.c by performing a specific manipulation. This could lead to the disclosure of sensitive information...

CVE-2026-10268

A weakness has been identified in janet-lang janet up to 1.41.0. This vulnerability affects the function unmarshalonefiber of the file src/core/marsh.c. Executing a manipulation can lead to integer overflow. It is possible to launch the attack on the local host. The exploit has been made availabl...

CVE-2026-10267

A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bounds read. Attacking locally is a requirement. The exploit has been released to the public and may be used for attack...