CVE-2026-10267

LOW 3.3

janet-lang janet debug.c doframe out-of-bounds

CVSS Score

3.3

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bounds read. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The patch is named ed17dd2c5913a23fb1107251e44a9410a3c30cf5.

CWE	CWE-125 CWE-119
Vendor	janet-lang
Product	janet
Published	Jun 1, 2026
Last Updated	Jun 1, 2026

Stay Ahead of the Next One

Get instant alerts for janet-lang janet

Be the first to know when new low vulnerabilities affecting janet-lang janet are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

janet-lang / janet

1.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 1.9 1.10 1.11 1.12 1.13 1.14 1.15 1.16 1.17 1.18 1.19 1.20 1.21 1.22 1.23 1.24 1.25 1.26 1.27 1.28 1.29 1.30 1.31 1.32 1.33 1.34 1.35 1.36 1.37 1.38 1.39 1.40 1.41.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/367546 vuldb.com: https://vuldb.com/vuln/367546/cti vuldb.com: https://vuldb.com/cve/CVE-2026-10267 vuldb.com: https://vuldb.com/submit/825072 github.com: https://github.com/janet-lang/janet/issues/1743 github.com: https://github.com/janet-lang/janet/issues/1743#issuecomment-4322129448 github.com: https://github.com/biniamf/pocs/tree/main/janet-debug-janet-doframe-env-data-oobread github.com: https://github.com/janet-lang/janet/commit/ed17dd2c5913a23fb1107251e44a9410a3c30cf5 github.com: https://github.com/janet-lang/janet/

Credits

🔍 biniam (VulDB User)