PT-2026-45445 · Git+1 · Janet

Biniam · CVE-2026-10268 · Published 2026-06-01 · Updated 2026-06-01

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions janet-lang janet versions prior to 1.41.1

Description An integer overflow can occur when executing a manipulation within the unmarshal one fiber() function located in the src/core/marsh.c file. This issue allows an attack to be launched on the local host.

Recommendations Apply patch d9b1d711ea1fde52ac73a82088b512a3e17bad0d to remediate the issue in versions prior to 1.41.1.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-189

CWE-190

Related Identifiers

CVE-2026-10268

Affected Products

Janet

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10268.json · Exploit
• 🔥 https://github.com/biniamf/pocs/tree/main/janet-marsh-unmarshal-intovf · Exploit
• https://github.com/janet-lang/janet/commit/d9b1d711ea1fde52ac73a82088b512a3e17bad0d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-10268 · Security Note
• https://osv.dev/vulnerability/CVE-2026-10268 · Vendor Advisory
• https://github.com/janet-lang/janet/issues/1744 · Note
• https://vuldb.com/submit/825075 · Note
• https://vuldb.com/vuln/367547/cti · Note
• https://vuldb.com/vuln/367547 · Note
• https://github.com/janet-lang/janet · Note
• https://vuldb.com/cve/CVE-2026-10268 · Note