https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-33260.htmlhttps://patchthecve.com/cve/CVE-2024-33260.htmlWed, 17 Jun 2026 07:31:35 +0000MEDIUM 5.1: Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.chttps://patchthecve.com/cve/CVE-2024-33259.htmlhttps://patchthecve.com/cve/CVE-2024-33259.htmlWed, 17 Jun 2026 07:31:34 +0000MEDIUM 5.5: Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scanner_seek at jerry-core/parser/js/js-scanner-util.c.https://patchthecve.com/cve/CVE-2024-33258.htmlhttps://patchthecve.com/cve/CVE-2024-33258.htmlWed, 17 Jun 2026 07:31:34 +0000HIGH 7.1: Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm/vm.c.https://patchthecve.com/cve/CVE-2024-33255.htmlhttps://patchthecve.com/cve/CVE-2024-33255.htmlWed, 17 Jun 2026 07:31:34 +0000MEDIUM 6.2: Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_string_list.https://patchthecve.com/cve/CVE-2024-29489.htmlhttps://patchthecve.com/cve/CVE-2024-29489.htmlWed, 17 Jun 2026 07:22:51 +0000MEDIUM 5.5: Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecma_get_object_type.https://patchthecve.com/cve/CVE-2023-36109.htmlhttps://patchthecve.com/cve/CVE-2023-36109.htmlWed, 17 Jun 2026 06:05:47 +0000CRITICAL 9.8: Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c.https://patchthecve.com/cve/CVE-2023-38961.htmlhttps://patchthecve.com/cve/CVE-2023-38961.htmlWed, 17 Jun 2026 06:11:24 +0000CRITICAL 9.8: Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.https://patchthecve.com/cve/CVE-2020-24187.htmlhttps://patchthecve.com/cve/CVE-2020-24187.htmlWed, 17 Jun 2026 03:05:16 +0000MEDIUM 5.5: An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Pointer Dereference).https://patchthecve.com/cve/CVE-2023-36201.htmlhttps://patchthecve.com/cve/CVE-2023-36201.htmlWed, 17 Jun 2026 06:05:52 +0000HIGH 7.5: An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays.https://patchthecve.com/cve/CVE-2020-22597.htmlhttps://patchthecve.com/cve/CVE-2020-22597.htmlWed, 17 Jun 2026 03:04:17 +0000CRITICAL 9.8: An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecma_builtin_array_prototype_object_slice parameter.https://patchthecve.com/cve/CVE-2023-34868.htmlhttps://patchthecve.com/cve/CVE-2023-34868.htmlWed, 17 Jun 2026 06:04:05 +0000HIGH 7.5: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-statm.c.https://patchthecve.com/cve/CVE-2023-34867.htmlhttps://patchthecve.com/cve/CVE-2023-34867.htmlWed, 17 Jun 2026 06:04:05 +0000HIGH 7.5: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at jerry-core/ecma/base/ecma-property-hashmap.c.