GCVE - cpe:2.3:a:jsish:jsish:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jsish:jsish:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jsish (`2a52ebad-1cf0-5f12-947d-7df371b4579f`)
Product	Jsish (`c7131565-3feb-5f1e-a40a-abc153a25cc2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/pcmacdon/jsish`	purl2cpe	2026-06-01 10:11:27.262240
`pkg:sourceforge/jsish`	purl2cpe	2026-06-01 10:11:27.262243

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-23260`	vulnerable	2026-06-08 05:22:31.839295	Details available An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file. Published: 2023-04-04T00:00:00.000Z Updated: 2025-02-18T17:07:38.911Z Open on db.gcve.eu Reference links https://github.com/pcmacdon/jsish/issues/14 https://jsish.org/fossil/jsi2/tktview?name=3e211e44b1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-23259`	vulnerable	2026-06-08 05:22:31.838980	Details available An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file. Published: 2023-04-04T00:00:00.000Z Updated: 2025-02-14T18:40:27.295Z Open on db.gcve.eu Reference links https://github.com/pcmacdon/jsish/issues/13 https://jsish.org/fossil/jsi2/tktview?name=b6bb078e00	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-22907`	vulnerable	2026-06-08 05:22:31.693403	Details available Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted value to the execute parameter. Published: 2021-07-13T14:44:28.000Z Updated: 2024-08-04T14:51:10.790Z Open on db.gcve.eu Reference links https://github.com/pcmacdon/jsish/issues/16	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-22875`	vulnerable	2026-06-08 05:22:31.684363	Details available Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code. Published: 2021-07-13T14:43:53.000Z Updated: 2024-08-04T14:51:11.144Z Open on db.gcve.eu Reference links https://github.com/pcmacdon/jsish/commit/5408a6d93f45bf1f7acd9ae5d44e0ebd77379e98 https://github.com/pcmacdon/jsish/issues/10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-22874`	vulnerable	2026-06-08 05:22:31.684041	Details available Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code. Published: 2021-07-13T14:43:49.000Z Updated: 2024-08-04T14:51:11.161Z Open on db.gcve.eu Reference links https://github.com/pcmacdon/jsish/commit/858da537bde4de9d8c92466d5a866505310bc328 https://github.com/pcmacdon/jsish/issues/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-22873`	vulnerable	2026-06-08 05:22:31.683453	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1010172`	vulnerable	2026-06-08 05:12:21.645945	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.