PYSEC-2020-93

2020-09-1718:15:00

Google

osv.dev

0.012 Low

EPSS

Percentile

85.1%

JSON

A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.

CPENameOperatorVersion
py-mini-racereq0.1.7
py-mini-racereq0.2.0
py-mini-racereq0.1.9
py-mini-racereq0.1.14
py-mini-racereq0.1.8
py-mini-racereq0.1.6
py-mini-racereq0.2.0b2
py-mini-racereq0.1.5
py-mini-racereq0.1.4
py-mini-racereq0.1.2

Name	Operator	Version
py-mini-racer	eq	0.1.7
py-mini-racer	eq	0.2.0
py-mini-racer	eq	0.1.9
py-mini-racer	eq	0.1.14
py-mini-racer	eq	0.1.8
py-mini-racer	eq	0.1.6
py-mini-racer	eq	0.2.0b2
py-mini-racer	eq	0.1.5
py-mini-racer	eq	0.1.4
py-mini-racer	eq	0.1.2