OSV-2026-1297

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/janet/OSV-2026-1297.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1297
Published
2026-09-18T00:21:36Z
Modified
2026-09-18T00:21:36Z
Summary
UNKNOWN READ in janet_to_string_b
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562551214

Crash type: UNKNOWN READ
Crash state:
janet_to_string_b
janet_formatbv
janet_panicf
References

Affected packages

OSS-Fuzz / janet

Package

Name
janet
Purl
pkg:generic/janet

Affected ranges

Type
GIT
Repo
https://github.com/janet-lang/janet
Events
Introduced
d8be849671a8824a57038f68626ab7dcac7ab529
Fixed
4fc4c8c351aa7062083cd5ce9ffe411f1c3ae64d

Affected versions

v1.*
v1.42.1

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"832159a677e3fd1c45a6fe88427e05555acc7a36:4fc4c8c351aa7062083cd5ce9ffe411f1c3ae64d"
introduced_range 
"a7b6c04fdfffb9d7f63143daffb4a1e262eb1a7e:a6470a427144ef683d2c388d6042d88a15c61681"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/janet/OSV-2026-1297.yaml"