CVE-2021-33449: Cesanta Mjs

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offset() in mjs.c.

Affected products

• Cesanta Mjs: before 2.20.0 (fixed in 2.20.0)

Published 2022-07-26. Last modified 2026-06-17.