Issues

Issues

• toFixed/toPrecision/toExponential round the shortest decimal string, not the actual value

  jerryscript-project/jerryscript#5321 · opened on Nov 7, 2026

• Numeric literals and Number() with exponents > 308 or < -324 ignore the significand decimal shift

  jerryscript-project/jerryscript#5320 · opened on Nov 7, 2026

• delete on an optional chain returns true without deleting the property

  jerryscript-project/jerryscript#5319 · opened on Nov 7, 2026

• Generator.prototype.return(v) on a completed generator returns undefined instead of v

  jerryscript-project/jerryscript#5318 · opened on Nov 7, 2026

• yield in an async generator does not await its operand

  jerryscript-project/jerryscript#5317 · opened on Nov 7, 2026

• Spread elements in array literals and call arguments are iterated after later elements are evaluated

  jerryscript-project/jerryscript#5316 · opened on Nov 7, 2026

• OOB heap write in Array.prototype.fill

  jerryscript-project/jerryscript#5315 · opened on Nov 2, 2026

• [Bug]lexer_construct_number_object casts oversized numeric literal to int32 -> UBSan float-cast-overflow (SIGILL) (CWE-681)

  jerryscript-project/jerryscript#5304 · opened on Aug 11, 2026
  1

• [Bug]ecma_make_number_value casts out-of-range double to integer -> UBSan float-cast-overflow (SIGILL) (CWE-681)

  jerryscript-project/jerryscript#5303 · opened on Aug 11, 2026
  1

• [Bug]Malformed snapshot bytecode drives VM-init stack-buffer-overflow (vm_init_exec, vm.c:5190) (CWE-125)

  jerryscript-project/jerryscript#5302 · opened on Aug 11, 2026
  1

• [Bug]Snapshot deserialization lacks bounds checks on untrusted offset/length fields -> out-of-bounds read (SEGV / ASan use-after-poison / DoS) (CWE-125)

  jerryscript-project/jerryscript#5301 · opened on Aug 11, 2026
  1

• Ungraceful handling of stack overflow

  jerryscript-project/jerryscript#5300 · opened on Jul 18, 2026

• Unusual Multithreading API

  jerryscript-project/jerryscript#5298 · opened on Jul 1, 2026
  1

• JerryScript: Proxy getOwnPropertyDescriptor invariant check misses descriptor defaults

  jerryscript-project/jerryscript#5297 · opened on Jun 20, 2026

• JerryScript: Proxy deleteProperty invariant checks can raise two exceptions and abort debug builds

  jerryscript-project/jerryscript#5296 · opened on Jun 20, 2026

• JerryScript: malformed snapshot literal offset causes out-of-bounds read in ecma_snapshot_get_literal

  jerryscript-project/jerryscript#5295 · opened on Jun 20, 2026

• JerryScript: configurable module namespace re-export causes type confusion and crash

  jerryscript-project/jerryscript#5294 · opened on Jun 20, 2026

• jerryscript jerry-snapshot tool: unbounded literals-list parser → global-buffer-overflow (OOB write) in process_generate

  jerryscript-project/jerryscript#5293 · opened on Jun 20, 2026

• jerryscript: NULL-pointer dereference in ES-module linker (ecma_module_resolve_import) via duplicate var/namespace-import binding — pre-link crash

  jerryscript-project/jerryscript#5292 · opened on Jun 20, 2026

• Private security contact for multiple snapshot loader memory corruption issues

  jerryscript-project/jerryscript#5291 · opened on Jun 17, 2026

• Segmentation fault on self-referential array raised to power of zero

  jerryscript-project/jerryscript#5290 · opened on Jun 9, 2026
  1

• Simple non fixed size jerry_string_to_buffer alternative?

  jerryscript-project/jerryscript#5289 · opened on Jun 3, 2026

• Heap reference count exhaustion

  jerryscript-project/jerryscript#5287 · opened on Apr 18, 2026

• Infinite recurssion in regex handling

  jerryscript-project/jerryscript#5286 · opened on Apr 18, 2026

• Infinite recursion resutls in stack overflow

  jerryscript-project/jerryscript#5285 · opened on Apr 18, 2026