Issues

Issues

• Heap-Buffer-Overflow in mjs skip_spaces_and_comments via mjs_exec()

  cesanta/mjs#324 · opened on Jul 30, 2026

• Heap use-after-free in mjs_next() via array splice during for-in iteration (CWE-416)

  cesanta/mjs#322 · opened on Feb 16, 2026

• Segmentation fault in function mjs_getretvalpos (at mjs.c:7812)

  cesanta/mjs#305 · opened on Nov 19, 2024

• Segmentation fault in function mjs_stack_size (at mjs.c:7849)

  cesanta/mjs#304 · opened on Nov 19, 2024

• Segmentation fault in function getprop_builtin_string (at mjs.c:8421)

  cesanta/mjs#303 · opened on Nov 19, 2024

• Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed in function gc_mark_string (mjs.c:10678)

  cesanta/mjs#302 · opened on Nov 19, 2024

• stack-use-after-scope in function mg_avprintf (at mjs.c:4697)

  cesanta/mjs#301 · opened on Nov 19, 2024

• heap-buffer-overflow in function mjs_execute (at mjs.c:8531)

  cesanta/mjs#300 · opened on Nov 19, 2024

• Float point error in mjs.c:8832

  cesanta/mjs#299 · opened on Oct 29, 2024

• Stack overflow in mjs.c: 8094

  cesanta/mjs#298 · opened on Oct 29, 2024

• SIGSEGV by invalid memory access in mjs.c:11477

  cesanta/mjs#297 · opened on Oct 29, 2024

• SEGV in mjs.c: 9546

  cesanta/mjs#296 · opened on Oct 29, 2024

• DEADLYSIGNAL on mjs.c:6275

  cesanta/mjs#295 · opened on Oct 29, 2024

• Is it possible to debug javascript code?

  cesanta/mjs#294 · opened on Sep 26, 2024

• Can mjs be used in Trusted Execution Environments (TEEs)?

  cesanta/mjs#293 · opened on Sep 24, 2024

• Segmentation fault on parse_call_dot_mem

  cesanta/mjs#292 · opened on Aug 27, 2024

• Segmentation fault on parse_unary

  cesanta/mjs#291 · opened on Aug 27, 2024

• Segmentation fault on mjs_mk_ffi_sig

  cesanta/mjs#288 · opened on May 9, 2024

• Segmentation fault on mjs_array_length

  cesanta/mjs#287 · opened on May 9, 2024

• Segmentation fault on mjs_do_gc

  cesanta/mjs#286 · opened on May 9, 2024

• Comparison to the CurlyMoo rules library

  cesanta/mjs#285 · opened on May 9, 2024

• SEGV Object.create

  cesanta/mjs#284 · opened on Apr 29, 2024

• SEGV JSON.parse

  cesanta/mjs#283 · opened on Apr 29, 2024

• SEGV JSON.stringify

  cesanta/mjs#282 · opened on Apr 29, 2024

• SEGV s2o

  cesanta/mjs#281 · opened on Apr 29, 2024