QuickJS

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. quickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflowCVE-2024-13903quickjs-ng · CVSS 4.3 · 0.7% likely

   CWE-121

2. quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflowCVE-2026-0821quickjs-ng · CVSS 7.3 · 0.5% likely

   CWE-122

3. quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflowCVE-2026-0822quickjs-ng · CVSS 6.3 · 0.5% likely

   CWE-122

4. quickjs-ng quickjs Atomics Ops quickjs.c use after freeCVE-2026-1144quickjs-ng · CVSS 6.3 · 0.4% likely

   CWE-416

5. quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflowCVE-2026-1145quickjs-ng · CVSS 6.3 · 0.4% likely

   CWE-122

6. quickjs-ng quickjs quickjs.c js_iterator_concat_return use after freeCVE-2026-3979quickjs-ng · CVSS 5.3 · 0.1% likely

   CWE-416

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.