Skip to content

Recommend switching to quickjs-ng #2917

Description

@Magnus-Sui-Titulus

Hello,

In attempting to run this using using nix run nixpkgs#tic-80 in NixOS I received the following error:

error: Package ‘quickjs-2025-09-13-2’ in /nix/store/03d4shy8nbqgsrq7q3amqgc461lvds92-source/pkgs/by-name/qu/quickjs/package.nix:94 is marked as insecure, refusing to evaluate.


       Known issues:
        - CVE-2026-1144
        - CVE-2026-1145

CVE-2026-1144

CVE-2026-1145

This issue was easily corrected on my end simply using (tic-80.override { quickjs = pkgs.quickjs-ng; }) in my list of packages, which forced building the package with quickjs-ng 0.11.0 rather than quickjs-2025-09-13-2.

While I have not tested this fix thoroughly, as this is my first time running this program, it seems to have not created any immediate problems; I was able to both run TIC-80, as well as import and load balmung, obtained from here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions