Denial Of Service (DoS)

2020-09-2101:17:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.012 Low

EPSS

Percentile

85.1%

JSON

py-mini-racer is vulnerable to denial of service (DoS). The vulnerability exists through a heap overflow which exists through the configuration pushed from the extension to the daemon.

CPENameOperatorVersion
py-mini-racerle0.3.0

CPE	Name	Operator	Version
	py-mini-racer	le	0.3.0

References

blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/

github.com/advisories/GHSA-vwcg-7xqw-qcxw

github.com/sqreen/PyMiniRacer/compare/v0.2.0...v0.3.0

0.012 Low

EPSS

Percentile

85.1%

JSON

Related for VERACODE:26783