CVE-2021-46524

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...

CVE-2021-46509

Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...

CVE-2021-46509

Cesanta MJS 2.20.0 contains a stack overflow in the snquote function (mjs/src/mjs_json.c). PT-2022-12754 documents this issue and notes a temporary workaround: restrict access to the snquote function until a patch is available; no patched version is identified in the provided documents.