Heap Overflow in PyMiniRacer

CRITICAL 9.8CVE-2020-25489 · GHSA-vwcg-7xqw-qcxw · PYSEC-2020-93 · Published 17/09/2020 · updated 17/06/2026

In short

CVE-2020-25489 is a CRITICAL (CVSS 9.8) vulnerability affecting py-mini-racer, python mini racer (sqreen).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.9% of all vulnerabilities.
Fix: update to 0.3.0 or later.

Package	Affected versions	Patched versions
py-mini-racer PyPI	`< 0.3.0`	`0.3.0`
python mini racer sqreen	`< 0.3.0`	`0.3.0`

A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.

NVD description

A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.