A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal...

Summary

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Metadata

Article ID

#253

Source

GitHub Advisory Database

Scraped At

3/2/2026, 7:10:13 AM

URL Hash

fb8fd6e091e77a2e…