{"action":"Upgrade py-mini-racer to 0.3.0 or later.","affected":[{"fixed":"0.3.0","introduced":"0"}],"component":"py-mini-racer","cve_ids":["CVE-2020-25489"],"ecosystem":"PyPI","epss":0.0252,"exploited":false,"fixed_versions":["0.3.0"],"ghsa_id":"GHSA-vwcg-7xqw-qcxw","id":"tcs_01M5KG0YZQTY32SM68XW7S2HJY","modified_at":"2024-10-21T20:32:52.020144Z","published_at":"2020-09-18T18:03:59Z","references":["https://osv.dev/vulnerability/GHSA-vwcg-7xqw-qcxw","https://github.com/sqreen/PyMiniRacer/security/advisories/GHSA-vwcg-7xqw-qcxw","https://nvd.nist.gov/vuln/detail/CVE-2020-25489","https://github.com/sqreen/PyMiniRacer/commit/627b54768293ec277f1adb997c888ec524f4174d","https://blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it","https://github.com/pypa/advisory-database/tree/main/vulns/py-mini-racer/PYSEC-2020-93.yaml","https://github.com/sqreen/PyMiniRacer","https://github.com/sqreen/PyMiniRacer/compare/v0.2.0...v0.3.0"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vwcg-7xqw-qcxw","url":"https://osv.dev/vulnerability/GHSA-vwcg-7xqw-qcxw"}],"summary":"Heap Overflow in PyMiniRacer"}