QuickJS before 7414e5f has a quickjs.h JS_FreeValueRT use-after-free because of incorrect garbage collection of async functions with closures.
{ "binaries": [ { "binary_name": "libquickjs", "binary_version": "2024.01.13-4" }, { "binary_name": "quickjs", "binary_version": "2024.01.13-4" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libquickjs", "binary_version": "2021.03.27-1ubuntu0.1~esm1" }, { "binary_name": "quickjs", "binary_version": "2021.03.27-1ubuntu0.1~esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }