CVE-2026-76819 | ProjectDiscovery Nuclei up to 3.9.x Goja JavaScript Engine pkg/js/ heap-based overflow

September 22, 2026 Yanac

A vulnerability classified as critical has been found in ProjectDiscovery Nuclei up to 3.9.x. Impacted is an unknown function of the file pkg/js/ of the component Goja JavaScript Engine. The manipulation leads to heap-based buffer overflow.

This vulnerability is listed as CVE-2026-76819. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More