https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1145.htmlhttps://patchthecve.com/cve/CVE-2026-1145.htmlWed, 17 Jun 2026 10:15:12 +0000MEDIUM 6.3: A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function js_typed_array_constructor_ta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and mayhttps://patchthecve.com/cve/CVE-2026-1144.htmlhttps://patchthecve.com/cve/CVE-2026-1144.htmlWed, 17 Jun 2026 10:15:12 +0000MEDIUM 6.3: A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is identihttps://patchthecve.com/cve/CVE-2025-46688.htmlhttps://patchthecve.com/cve/CVE-2025-46688.htmlWed, 17 Jun 2026 09:26:49 +0000MEDIUM 5.6: quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.https://patchthecve.com/cve/CVE-2025-46687.htmlhttps://patchthecve.com/cve/CVE-2025-46687.htmlWed, 17 Jun 2026 09:26:48 +0000MEDIUM 5.6: quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.