CVE-2026-2241
Low
Description
A vulnerability was found in janet-lang janet up to 1.40.1. This affects the function os_strftime of the file src/core/os.c. Performing a manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is named 0f285855f0e34f9183956be5f16e045f54626bff. To fix this issue, it is recommended to deploy a patch.
SeverityLow
CVSS3.3
Exploit probability—
Product
Janet
PublishedFeb 9, 2026
First seenFeb 9, 2026
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| janet-lang janet | v ≤ 1.40.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.