js-vuln-db

A collection of JavaScript engine CVEs with PoCs

Web Development Security & Privacy

Explore on GitHub Read Hacker News discussions

2Distinct people

2Mentions

0Explicit recommenders

2.3KGitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

A collection of JavaScript engine CVEs with PoCs

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by week2 dated mentions

Observed mentions: 2019-08-30 17:58:25 UTC to 2019-12-03 18:35:44 UTC. Weeks start Monday, UTC.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Comments
Aug 26	2019-08-26 00:00:00 UTC	2019-09-02 00:00:00 UTC	1	1
Sep 2	2019-09-02 00:00:00 UTC	2019-09-09 00:00:00 UTC	0	0
Sep 9	2019-09-09 00:00:00 UTC	2019-09-16 00:00:00 UTC	0	0
Sep 16	2019-09-16 00:00:00 UTC	2019-09-23 00:00:00 UTC	0	0
Sep 23	2019-09-23 00:00:00 UTC	2019-09-30 00:00:00 UTC	0	0
Sep 30	2019-09-30 00:00:00 UTC	2019-10-07 00:00:00 UTC	0	0
Oct 7	2019-10-07 00:00:00 UTC	2019-10-14 00:00:00 UTC	0	0
Oct 14	2019-10-14 00:00:00 UTC	2019-10-21 00:00:00 UTC	0	0
Oct 21	2019-10-21 00:00:00 UTC	2019-10-28 00:00:00 UTC	0	0
Oct 28	2019-10-28 00:00:00 UTC	2019-11-04 00:00:00 UTC	0	0
Nov 4	2019-11-04 00:00:00 UTC	2019-11-11 00:00:00 UTC	0	0
Nov 11	2019-11-11 00:00:00 UTC	2019-11-18 00:00:00 UTC	0	0
Nov 18	2019-11-18 00:00:00 UTC	2019-11-25 00:00:00 UTC	0	0
Nov 25	2019-11-25 00:00:00 UTC	2019-12-02 00:00:00 UTC	0	0
Dec 2	2019-12-02 00:00:00 UTC	2019-12-09 00:00:00 UTC	1	1

What Hacker News says

2 sources

muricula·Dec 3, 2019

https://github.com/tunz/js-vuln-db I'm not sure Javascript has fewer security problems at all. Sandboxes help a lot, but not all sandboxes are equally strong and Javascript engines routinely get popped.

In BPF: A New Type of Software

gok·Aug 30, 2019

> Do you have numbers to back that up? Hm hard to come up with a number that shows JS optimizations are hard, but you can peruse a collection of Javascript engine CVEs: https://github.com/tunz/js-vuln-db Notice how many are JIT or optimization issues, or are in esoteric features like async generators or the spread operator.

In The Baseline Interpreter: A Faster JavaScript Interpreter in Firefox 70