Skip to content

Recommend switching to quickjs-ng #2917

Description

@Magnus-Sui-Titulus

Hello,

In attempting to run this using using nix run nixpkgs#tic-80 in NixOS I received the following error:

error: Package ‘quickjs-2025-09-13-2’ in /nix/store/03d4shy8nbqgsrq7q3amqgc461lvds92-source/pkgs/by-name/qu/quickjs/package.nix:94 is marked as insecure, refusing to evaluate.


       Known issues:
        - CVE-2026-1144
        - CVE-2026-1145

CVE-2026-1144

CVE-2026-1145

This issue was easily corrected on my end simply using (tic-80.override { quickjs = pkgs.quickjs-ng; }) in my list of packages, which forced building the package with quickjs-ng 0.11.0 rather than quickjs-2025-09-13-2.

While I have not tested this fix thoroughly, as this is my first time running this program, it seems to have not created any immediate problems; I was able to both run TIC-80, as well as import and load balmung, obtained from here.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions