GCVE - cpe:2.3:a:lily-lang:lily:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lily-lang:lily:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Lily Lang (`da7b0321-d54e-5bff-aa60-e896247daf4c`)
Product	Lily (`0e3009f2-c7ce-5374-a9a7-061a2cf7610a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
`pkg:github/fascinatedbox/lily`	purl2cpe	2026-06-19 13:12:42.531700

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-3392`	vulnerable	2026-06-08 08:01:18.552226	FascinatedBox lily lily_emitter.c eval_tree null pointer dereference LOW (3.3) A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function eval_tree of the file src/lily_emitter.c. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-03-01T11:32:11.374Z Updated: 2026-03-02T18:20:08.297Z Open on db.gcve.eu Reference links https://vuldb.com/?id.348278 https://vuldb.com/?ctiid.348278 https://vuldb.com/?submit.761328 https://github.com/FascinatedBox/lily/issues/384 https://github.com/oneafter/0122/blob/main/i384/repro.lily	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3391`	vulnerable	2026-06-08 08:01:18.551812	FascinatedBox lily lily_emitter.c clear_storages out-of-bounds LOW (3.3) A security flaw has been discovered in FascinatedBox lily up to 2.3. Impacted is the function clear_storages of the file src/lily_emitter.c. The manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-03-01T11:32:08.714Z Updated: 2026-03-02T18:38:07.796Z Open on db.gcve.eu Reference links https://vuldb.com/?id.348277 https://vuldb.com/?ctiid.348277 https://vuldb.com/?submit.761327 https://github.com/FascinatedBox/lily/issues/383 https://github.com/oneafter/0122/blob/main/i383/repro.lily	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3390`	vulnerable	2026-06-08 08:01:18.551209	FascinatedBox lily Error Reporting lily_build_error.c patch_line_end out-of-bounds LOW (3.3) A vulnerability was identified in FascinatedBox lily up to 2.3. This issue affects the function patch_line_end of the file src/lily_build_error.c of the component Error Reporting. The manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-03-01T10:02:10.824Z Updated: 2026-03-02T13:49:15.139Z Open on db.gcve.eu Reference links https://vuldb.com/?id.348276 https://vuldb.com/?ctiid.348276 https://vuldb.com/?submit.761326 https://github.com/FascinatedBox/lily/issues/382 https://github.com/oneafter/0122/blob/main/i382/repro.lily	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2662`	vulnerable	2026-06-08 07:55:17.353253	FascinatedBox lily lily_emitter.c count_transforms out-of-bounds LOW (3.3) A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the function count_transforms of the file src/lily_emitter.c. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-02-18T19:32:07.847Z Updated: 2026-02-23T10:19:13.917Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346460 https://vuldb.com/?ctiid.346460 https://vuldb.com/?submit.753166 https://github.com/FascinatedBox/lily/issues/381 https://github.com/oneafter/0122/blob/main/i381/repro.lily	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2660`	vulnerable	2026-06-08 07:55:17.352146	FascinatedBox lily lily_symtab.c shorthash_for_name use after free LOW (3.3) A vulnerability was identified in FascinatedBox lily up to 2.3. Affected by this issue is the function shorthash_for_name of the file src/lily_symtab.c. The manipulation leads to use after free. Local access is required to approach this attack. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet. Published: 2026-02-18T18:02:07.851Z Updated: 2026-02-23T10:18:47.628Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346458 https://vuldb.com/?ctiid.346458 https://vuldb.com/?submit.753164 https://github.com/FascinatedBox/lily/issues/385 https://github.com/oneafter/0122/blob/main/i385/repro.lily	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Lily

Notes

PURL mappings

Vulnerability references

Contribute