CVE-2021-29328: Moddable

High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days.

OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c.

Affected products

• Moddable Moddable: version 10.5.0 only

Published 2021-11-19. Last modified 2026-06-17.