VULNERABILITY INTELLIGENCE
CVE-2026-10267
CVSS score3.3 LOW
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-06-01
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bounds read. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The patch is named ed17dd2c5913a23fb1107251e44a9410a3c30cf5.
Weakness classification
- cna@vuldb.com: CWE-119