What’s Vulnerable › Products

QuickJS vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your QuickJS version is affected

Latest QuickJS vulnerabilities

• CVE-2025-69654 — (CVSS 7.5)
• CVE-2025-69653 — (CVSS 6.5)
• CVE-2025-62496 — Integer overflow in js_bigint_from_string in QuickJS (CVSS 8.8)
• CVE-2025-62495 — Type confusion in string addition in QuickJS (CVSS 8.8)
• CVE-2025-62494 — Type confusion in string addition in QuickJS (CVSS 8.8)
• CVE-2025-62493 — Heap out-of-bounds read in js_bigint_to_string1 in QuickJS (CVSS 6.5)
• CVE-2025-62492 — Heap out-of-bounds read in js_typed_array_indexOf in QuickJS (CVSS 6.5)
• CVE-2025-62491 — Use-after-free in js_std_promise_rejection_check in QuickJS (CVSS 8.8)
• CVE-2025-62490 — Use-after-free in js_print_object in QuickJS (CVSS 8.8)
• CVE-2025-46688 — (CVSS 8.4)
• CVE-2023-48184 — (CVSS 3.9)
• CVE-2023-48183 — (CVSS 7.5)
• CVE-2023-31922 — (CVSS 7.5)
• CVE-2020-22876 — (CVSS 7.5)