gravity vulnerabilities
CVEs whose affected-version data names the gravity package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-90714Medium· 6.3PoCA weakness has been identified in marcobambini Gravity up to 0.9.7
A weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravity_json.c of the component JSON parser. This manipulation causes memory corruption. The attack is …
CVE-2026-90715High· 7.3PoCA security vulnerability has been detected in marcobambini Gravity up to 0.9.7
A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity_json.c of the component udp json-parser. Such manipulation leads to integer overflow. The atta…
CVE-2026-90716Medium· 5.5PoCA vulnerability was detected in marcobambini Gravity up to 0.9.7
A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parse_number_expression of the file src/compiler/gravity_parser.c of the component Number Parser. Performing a manipulation results in out-of-bou…
CVE-2026-40504Critical· 9.8PoCCreolabs Gravity < 0.9.6 Heap Buffer Overflow via gravity_vm_exec
Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts with many string literals at global scope. Attackers can …