Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ3Y2ctN3hxdy1xY3h3

Heap Overflow in PyMiniRacer

A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.

More details on https://blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/.

Permalink: https://github.com/advisories/GHSA-vwcg-7xqw-qcxw
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ3Y2ctN3hxdy1xY3h3
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 3 years ago
Updated: over 1 year ago

Identifiers: GHSA-vwcg-7xqw-qcxw, CVE-2020-25489
References:

• https://github.com/sqreen/PyMiniRacer/security/advisories/GHSA-vwcg-7xqw-qcxw
• https://nvd.nist.gov/vuln/detail/CVE-2020-25489
• https://blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/
• https://github.com/sqreen/PyMiniRacer/commit/627b54768293ec277f1adb997c888ec524f4174d
• https://github.com/sqreen/PyMiniRacer/compare/v0.2.0...v0.3.0
• https://github.com/advisories/GHSA-vwcg-7xqw-qcxw

Repository: https://github.com/sqreen/PyMiniRacer
Blast Radius: 0.0

Affected Packages