ZeroDay Findings
Sign inSign up

Findings

CVE-2026-3385

A vulnerability was detected in wren-lang wren up to 0.4.0.

Published Mar 1, 2026 · updated Jun 17, 2026 · wren wren

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 1, 2026 · NIST NVD

    Detected

    A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected

  • cpe wren/wrenversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-3385

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-3385

    A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was

    nvd.nist.gov

References