Skip to content
OpenAdvisories

Vendor

locutusjs

5 known vulnerabilities.

Products

locutus 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-29091

    Locutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injection

    Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.0, a remote code execution (RCE) flaw was discovered in the locutus project, specifically within the call_user_func_array function implementatio…

    locutusjs locutus locutus npm