EUVD-2024-21612

Malicious code in bioql PyPI...

Jsish Resource Management Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database. A resource management error vulnerability exists in Jsish version v3.5.0, which stems from a post-release reuse of SplitChar in /src/jsiUtils.c. The vulnerability is caused by the presence of an error in SplitChar...

PT-2024-20310 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A use-after-free issue was discovered in Jsish via the SplitChar at ./src/jsiUtils.c. Recommendations: For Jsish version 3.5.0, at the moment, there is no information about a newer version that contains a fix...

Jsish Buffer Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database. A buffer error vulnerability exists in Jsish version v3.5.0, which stems from a heap buffer overflow contained in /src/jsiUtils.c. The vulnerability is caused by the inclusion of a heap buffer overflow...

Jsish Resource Management Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database . A resource management error vulnerability exists in the 'jsiValueGetString' function jsiUtils.c file in Jsish version 2.4.84 2.0484. An attacker can exploit this vulnerability to cause a denial of service with the help of...

CVE-2018-1000661

Affected software: jsish. Vulnerable component: Jsi_LogMsg in jsiUtils.c (line 196). Issue: CWE-476 NULL pointer dereference in version 2.4.67 that can crash via specially crafted JavaScript execution. Impact: crash/segmentation fault as described; exploitation requires user-supplied JavaScript i...