Locutus

8 CVEs across 2 Locutus products. Browse Locutus vulnerabilities, severities, and proof-of-concept exploits.

Locutus products with known CVEs

ProductCVEs
Locutus7
Locutus Php1
Locutus CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-33994Critical9.82026-03-27Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Starting in version 2.0.39 and prior to version 3.0.25, a prototy…
CVE-2026-33993Critical9.82026-03-27Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.25, the `unserialize()` function in `locutus…
CVE-2026-32304Critical9.82026-03-13Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to 3.0.14, the create_function(args, code) function passes…
CVE-2026-29091High8.12026-03-06Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.0, a remote code execution (RCE) flaw was di…
CVE-2026-25521High8.82026-02-04Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. In versions from 2.0.12 to before 2.0.39, a prototype pollution v…
CVE-2021-23392Medium5.32021-06-08The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.
CVE-2020-7719Critical9.82020-09-01Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.
CVE-2020-13619Critical9.82020-07-01php/exec/escapeshellarg in Locutus PHP through 2.0.11 allows an attacker to achieve code execution.