CVE-2023-29458: Zabbix

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.

Affected products

• Zabbix Zabbix: version 5.0.34 only; version 6.0.17 only; version 6.4.2 only

Published 2023-07-13. Last modified 2026-06-17.