{"action":"Upgrade py-mini-racer to 0.3.0 or later.","affected":[{"fixed":"0.3.0","introduced":"0"}],"component":"py-mini-racer","cve_ids":["CVE-2020-25489"],"ecosystem":"PyPI","epss":0.0252,"exploited":false,"fixed_versions":["0.3.0"],"ghsa_id":"GHSA-vwcg-7xqw-qcxw","id":"tcs_01M5KGAZ8KDH76HSMHJT04K563","modified_at":"2023-11-08T04:03:10.037518Z","published_at":"2020-09-17T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-93","https://blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/","https://github.com/sqreen/PyMiniRacer/compare/v0.2.0...v0.3.0","https://github.com/advisories/GHSA-vwcg-7xqw-qcxw"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-93","url":"https://osv.dev/vulnerability/PYSEC-2020-93"}],"summary":"A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption."}