CVE-2026-2241mediumCWE-119CWE-125

CVE-2026-2241: falha de média gravidade em janet-lang janet

janet-lang janet os.c os_strftime out-of-bounds

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar janet

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.2%
A vulnerability was found in janet-lang janet up to 1.40.1. This affects the function os_strftime of the file src/core/os.c. Performing a manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is named 0f285855f0e34f9183956be5f16e045f54626bff. To fix this issue, it is recommended to deploy a patch.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
janet-lang · janet
CVEs relacionadas — janet-lang janet

No mesmo produto, das mais perigosas para as menos.

CVE-2026-2869MEDIUMjanet-lang janet handleattr specials.c janetc_varset out-of-boundsEPSS 0.2%CVE-2026-2242MEDIUMjanet-lang janet specials.c janetc_if out-of-boundsEPSS 0.2%CVE-2026-2240MEDIUMjanet-lang janet compile.c janetc_pop_funcdef out-of-boundsEPSS 0.2%CVE-2026-10268MEDIUMjanet-lang janet marsh.c unmarshal_one_fiber integer overflowEPSS 0.1%CVE-2026-10267MEDIUMjanet-lang janet debug.c doframe out-of-boundsEPSS 0.1%