CVE-2026-3385

Published
View on NVD ↗
CVSS v3
3.3
LOW
CVSS v2
1.7
LOW
Affected
2
PROJECTS

Description

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

oneafter/0122
oneafter/0122
GitHubGitHub
wren-lang/wren
wren-lang/wren
The Wren Programming Language. Wren is a small, fast, class-based concurrent scripting language.
GitHubGitHub
8.02K