low3.3
CVE-2026-3385
A vulnerability was detected in wren-lang wren up to 0.4.0.
Impact
A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wren | Wren | through 0.4.0 |