The vulnerability resides in the `doframe` function within Janet's `debug.c` and permits an out-of-bounds read. An attacker can manipulate the function with locally executed code to read memory that should not be accessible, potentially leaking sensitive data. This flaw is classified under CWE-119 (Buffer Copy without Checking Size) and CWE-125 (Out-Of-Bounds Read).

Janet language interpreter (janet-lang:janet) versions up to and including 1.41.0 are affected. The issue impacts all installations running these releases, regardless of operating system, as the flaw is in the core interpreter code.

The CVSS score of 4.8 indicates moderate severity. EPSS data is currently unavailable, and the vulnerability is not listed in CISA's KEV catalog. Since the exploit requires local execution, it is most relevant to environments where untrusted code may run on the same system. The public exploit has been released, though no known widespread exploitation is reported as of the data provided.