GCVE - cpe:2.3:a:wren:wren:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wren:wren:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wren (`447c59aa-c6ca-5851-9895-c1c1765ecd3d`)
Product	Wren (`aeca36a1-7380-5103-a066-0413cdb568f1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
`pkg:github/wren-lang/wren`	purl2cpe	2026-06-19 13:12:30.255369

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-3387`	vulnerable	2026-06-08 08:01:18.545584	wren-lang wren wren_compiler.c getByteCountForArguments null pointer dereference LOW (3.3) A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wren_compiler.c. Such manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-03-01T09:32:08.753Z Updated: 2026-03-02T19:35:15.992Z Open on db.gcve.eu Reference links https://vuldb.com/?id.348273 https://vuldb.com/?ctiid.348273 https://vuldb.com/?submit.761312 https://github.com/wren-lang/wren/issues/1220 https://github.com/oneafter/0122/blob/main/i1220/repro	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3386`	vulnerable	2026-06-08 08:01:18.544992	wren-lang wren wren_compiler.c emitOp out-of-bounds LOW (3.3) A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file src/vm/wren_compiler.c. This manipulation causes out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-03-01T08:32:11.407Z Updated: 2026-03-02T19:34:45.550Z Open on db.gcve.eu Reference links https://vuldb.com/?id.348272 https://vuldb.com/?ctiid.348272 https://vuldb.com/?submit.761306 https://github.com/wren-lang/wren/issues/1219 https://github.com/oneafter/0122/blob/main/i1219/repro	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3385`	vulnerable	2026-06-08 08:01:18.544413	wren-lang wren wren_compiler.c resolveLocal recursion LOW (3.3) A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-03-01T08:32:09.182Z Updated: 2026-03-02T19:34:14.330Z Open on db.gcve.eu Reference links https://vuldb.com/?id.348271 https://vuldb.com/?ctiid.348271 https://vuldb.com/?submit.761305 https://github.com/wren-lang/wren/issues/1218 https://github.com/oneafter/0122/blob/main/i1218/repro	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2858`	vulnerable	2026-06-08 07:55:17.610031	wren-lang wren Source File wren_compiler.c peekChar out-of-bounds LOW (3.3) A vulnerability was identified in wren-lang wren up to 0.4.0. This affects the function peekChar of the file src/vm/wren_compiler.c of the component Source File Parser. Such manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-02-20T21:32:08.945Z Updated: 2026-02-24T14:50:28.182Z Open on db.gcve.eu Reference links https://vuldb.com/?id.347097 https://vuldb.com/?ctiid.347097 https://vuldb.com/?submit.754489 https://github.com/wren-lang/wren/issues/1217 https://github.com/oneafter/0122/blob/main/i1217/repro	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2657`	vulnerable	2026-06-08 07:55:17.345891	wren-lang wren Error Message wren_compiler.c printError stack-based overflow LOW (3.3) A vulnerability has been found in wren-lang wren up to 0.4.0. This impacts the function printError of the file src/vm/wren_compiler.c of the component Error Message Handler. Such manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-02-18T16:32:07.566Z Updated: 2026-02-23T10:18:07.494Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346455 https://vuldb.com/?ctiid.346455 https://vuldb.com/?submit.752791 https://github.com/wren-lang/wren/issues/1221 https://github.com/oneafter/0122/blob/main/i1221/repro	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Wren

Notes

PURL mappings

Vulnerability references

Contribute