CVE-2026-37630

Impact

An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/quickjs-ng/quickjs/issues/1400
• https://github.com/quickjs-ng/quickjs/issues/1400