CVE-2025-50360: Dannyvankooten Pepper

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7. Malicious execution of a pepper source file(.pr) could lead to arbitrary code execution or Denial of Service.

Affected products

• Dannyvankooten Pepper: version 0.1.1 only

Published 2025-12-03. Last modified 2026-06-17.