Skip to content
Heist/ feed
Back to feed
Critical

Security advisory

Type: advisorySources: OSVCVE: CVE-2020-22873

Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2020-22873
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 12:34 UTC · Revision 1

Source evidence

CVE-2020-22873

core-osv · Original source

Published 13 Jul 2021, 15:15 UTC

Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code.

osv:CVE-2020-22873
Complete source record
{
  "id": "c023325b4e11c7dc0f3f21ebdba5ba404f958c1d94e0add903b5521e4b7d9422",
  "url": "https://osv.dev/vulnerability/CVE-2020-22873",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2020-22873",
    "summary": "Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code.",
    "evidence": "osv:CVE-2020-22873",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2020-22873",
      "aliases": [
        "CVE-2020-22873"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/pcmacdon/jsish",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "430ea27accd4d4ffddc946c9402e7c9064835a18"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "fixed": "430ea27accd4d4ffddc946c9402e7c9064835a18"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "3.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-22873.json",
            "vanir_signatures": [
              {
                "id": "CVE-2020-22873-00aeed67",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "36257655232365604988790172652921756728",
                    "252779338003555855852763152789936792262",
                    "283704748760516963433258891053191748581",
                    "311419856367695319152086357035394556946",
                    "330002604602447708755092270993964753997",
                    "339377129384202111884957670283550700469",
                    "38503112203867662495476397256434851855",
                    "132277219928269216264221230364745413662",
                    "239233384051516930760306194419390722636",
                    "229804350527569725601510700596310436146",
                    "48233608635786202621459929333461612737",
                    "291522505104405458477110570979241439989",
                    "41606034601500826354953312825166195413",
                    "73206885223656283432857981962878412482",
                    "308883737302360376747271175488925657987",
                    "277941262678216606534280133672310569562",
                    "290218784281673781746920519441961526",
                    "276219993841764626775193151424629047897",
                    "327948375963618962555975435271447105009",
                    "259802214796163168912977562287389005454",
                    "152514093736822001981656715272012581303",
                    "2450603633203399762741204892780392750",
                    "92828557251513016617586652726557732909",
                    "57992138870099808768982942468328276019",
                    "212005006665788944583597261246572134911",
                    "305992026658576127537582812527271726889",
                    "335113211917946938226131789099706954643",
                    "80998289699593925311716359555940822033",
                    "288833429458978046465509245732119797749",
                    "254496270866187464560362478260658664526",
                    "292764775513277053809952730877587755209",
                    "256018014753411294472848622337162157692"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiEval.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-02add100",
                "digest": {
                  "length": 2298,
                  "function_hash": "163763245615092369379345438051125888850"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiUtils.c",
                  "function": "jsiLNGetMatches"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-04a097b4",
                "digest": {
                  "length": 1582,
                  "function_hash": "170568530883192692424621234643294655668"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiCmds.c",
                  "function": "DebugAddCmd"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-06001e4e",
                "digest": {
                  "length": 1006,
                  "function_hash": "326069416430653032347909668135697815471"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiCmds.c",
                  "function": "SysVerConvertCmd"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-0a63e63b",
                "digest": {
                  "length": 539,
                  "function_hash": "184392420944393592154033346415379756539"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiValue.c",
                  "function": "Jsi_ValueInsertArray"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-0d2eeb24",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "769533664360579456064080102628133560",
                    "197626947993447168056757464620616298535",
                    "6118486859629093912939851701444892711",
                    "189537484266612640627614166594597941238",
                    "28268786648514517854356782344252780229"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiPstate.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-131dbba8",
                "digest": {
                  "length": 6170,
                  "function_hash": "329075477145897935186359301757670598572"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiWebSocket.c",
                  "function": "jsi_wscallback_websock"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-13becbd5",
                "digest": {
                  "length": 2040,
                  "function_hash": "84888645688717599805968752914783473362"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiTree.c",
                  "function": "TreeTest"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-13ef8f21",
                "digest": {
                  "length": 2391,
                  "function_hash": "197299933349756667054387966128611338682"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiCode.c",
                  "function": "jsi_code_decode"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-1f3e8338",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "75425008590862580131497198291397970775",
                    "102799434376686103556354163041391318698",
                    "19713779431270707775668965893496101018",
                    "10993258604768613735070608942160422951",
                    "218284657207990911193694063381566655847",
                    "295753160516735102053325213277014756965",
                    "160849158221195526137208428633679632684",
                    "254113525303441991573043638331506741589",
                    "255446211542120251575382413662904821912",
                    "69331936412241617608397667726329973919",
                    "160849158221195526137208428633679632684",
                    "254113525303441991573043638331506741589",
                    "126127984921415184198468725803960998106",
                    "191591648882560300950534149095389253461",
                    "181550730832004793066998647200474517378",
                    "8833109823880428935773864028638625918",
                    "20152528927436926438860687990441887707",
                    "253720066308138874419356816945686204677",
                    "154920579470418368478868890178525897418",
                    "320553899124852934344850591762428235822"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiSqlite.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-224fb1bc",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "39702418052872244292701521540442425301",
                    "29997732778202194079280765346649277228",
                    "331465699475762979191640501764973139630",
                    "200317925187156248294506835396811983811",
                    "323820880452353884133207202491150026609",
                    "229245753252227713639951282737510493270",
                    "203725592227872659973784681058659312840",
                    "335829817551966787865548563999474857580",
                    "308828069762268983692642826840960534670",
                    "213200733282883939419875256709407908089",
                    "330710001823478131997713423051348871841"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiInterp.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-262e9c2d",
                "digest": {
                  "length": 2583,
                  "function_hash": "214372891145066038426845638948933076105"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiFunc.c",
                  "function": "jsi_ArgTypeCheck"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-2f93cbfb",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "304329354325104708831863181604693122448",
                    "311158021898847548007032589852366949860",
                    "242412704585494294051166762664839681127",
                    "128511684779762273849909862550554821842"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiOptions.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-3193bd24",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "198415773226498852252281065473545630184",
                    "82402659406001543312992468154373493779",
                    "120065657313862318503440022467711383551",
                    "46051291809045939945981058329552383833"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiString.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-33b67d79",
                "digest": {
                  "length": 2752,
                  "function_hash": "46506124412502083241561752767776446881"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiFunc.c",
                  "function": "jsi_RunFuncCallCheck"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-36b92b5c",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "212911621439675104572849644853893401148",
                    "70009513447780397213004643942904791957",
                    "114775728106438261117196002692600626844",
                    "95484526629421758536259781763478649418"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiRegexp.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-41f0dfb4",
                "digest": {
                  "length": 1266,
                  "function_hash": "16975617971522695901271820210092522117"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiSqlite.c",
                  "function": "dbEvalSetColumnJSON"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-4c7c1530",
                "digest": {
                  "length": 1221,
                  "function_hash": "295009848889881971631079413649275967288"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiOptions.c",
                  "function": "jsi_BitfieldToValue"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-506f3b66",
                "digest": {
                  "length": 752,
                  "function_hash": "331903306583060775894918142186951128984"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiNumber.c",
                  "function": "NumberToExponentialCmd"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-51325d27",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "249828251310939457801172797950529066618",
                    "21333357850575182788155642578331074896",
                    "57618752463711254316316798724219904783",
                    "146470656851985051087159920406693878623",
                    "56768156377327285705974543344345988963",
                    "21333357850575182788155642578331074896",
                    "57618752463711254316316798724219904783",
                    "146470656851985051087159920406693878623",
                    "189656426350146735066076111436428453003",
                    "144621151244602928115986299937473483172",
                    "107836246901178372307300330938765414470",
                    "328908036483469272848404148488120680952",
                    "120717140976337782944667124029551012938",
                    "325318420042939090997021509003935550090",
                    "330615256475141322185096121460819924618",
                    "204172363264268826000850110861979528725",
                    "21333357850575182788155642578331074896",
                    "57618752463711254316316798724219904783",
                    "146470656851985051087159920406693878623",
                    "77083116836711788323277498834237533798",
                    "192628697718599825355358291867318808294",
                    "149931407309889979568437954352573175879",
                    "331792385013424499537103856122802668592"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiNumber.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-51cfe87e",
                "digest": {
                  "length": 4244,
                  "function_hash": "209892868976546563098651922766722341437"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiUtils.c",
                  "function": "jsiValueGetString"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-52011981",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "130822415513134375071894244490047419594",
                    "324581134611287467679086228674521550161",
                    "168227589937298405836232841391032128078",
                    "231003422362024364583141377407017732540",
                    "80311372867995643807784050698960230907",
                    "323441177280665492095911255781032383905",
                    "87187625989499534054195699149527977066",
                    "64331512002082345958072980915736142927"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiUtils.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-53417c83",
                "digest": {
                  "length": 520,
                  "function_hash": "58725834678732644367141292160646264687"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiNumber.c",
                  "function": "NumberToFixedCmd"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-58228711",
                "digest": {
                  "length": 979,
                  "function_hash": "37180386329339122839836650952973369875"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiEval.c",
                  "function": "jsiDumpInstr"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-5e5d1d3c",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "289916966524968873989037728754807416180",
                    "275905999618707053764479361501936318947",
                    "247402161407568313060589624509127841427",
                    "268920896609417270199593964917342420483",
                    "329048925345816464693968264935899725854",
                    "303489708885737530739696848252070136959",
                    "178230354933712143743394651993828801168",
                    "322658539723856905446416465994331003986",
                    "83169774564055453198259902562225981908",
                    "141799183111789615741271354993215026845",
                    "91899189645386317652019943734051545997",
                    "136984058746158598104832110239548147863"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiFunc.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-608a40eb",
                "digest": {
                  "length": 10223,
                  "function_hash": "47451147829303158566206075840848650388"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiWebSocket.c",
                  "function": "jsi_wscallback_http"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-61772368",
                "digest": {
                  "length": 1284,
                  "function_hash": "309622148022712508017653261495498479207"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiCmds.c",
                  "function": "DebugInfoCmd"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-62f9931d",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "23705055404344101710994304636897341190",
                    "86366521651768172194160320026794124107",
                    "253303585595498902403501358119861001792",
                    "252918508307041829289362865941589869800",
                    "254205274004637183375372211448645736713",
                    "199536847338556688084427818709217678037",
                    "283539726773968877014952903356358425912",
                    "282191367325878570671312911179801078859",
                    "4557863804341903875873735400946888123",
                    "62346569334114738370416720819947434076",
                    "146564911332020025179812346516099735640",
                    "199159343132134472479732399612723302532",
                    "219033542098014037672999731226783023024",
                    "317535163286424909793081962364019665524",
                    "120475721674179455383193673957340846752",
                    "145610169540681964946744520460183652682"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiValue.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-676c2d65",
                "digest": {
                  "length": 867,
                  "function_hash": "87774684088483132051801376026459194564"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiRegexp.c",
                  "function": "Jsi_RegExpMatch"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-6896249f",
                "digest": {
                  "length": 1320,
                  "function_hash": "52489667053871239243315083875982832983"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiCmds.c",
                  "function": "SysTimesCmd"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-696585c3",
                "digest": {
                  "length": 415,
                  "function_hash": "55801927613354370166310292110973200495"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiValue.c",
                  "function": "Jsi_ValueArrayIndex"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-6a007a74",
                "digest": {
                  "length": 1243,
                  "function_hash": "216300752813525900694766931729994567023"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiMySql.c",
                  "function": "mdbEvalSetColumn"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-70913554",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "321421813799866310929064558468118531893",
                    "323491791762816050901305114960055490692",
                    "189917151405752376082467562163624529472",
                    "200685666143228536090632190035004966431",
                    "50448673370478709551619472281403371460"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsi.h"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-74c31b15",
                "digest": {
                  "length": 750,
                  "function_hash": "304924808100187839758688361628704189708"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiWebSocket.c",
                  "function": "jsi_wsGetHeaders"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-81ba4878",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "109397878654057533424115646926891251196",
                    "223836916500036528851211871033192432279",
                    "93014788947656905529102313161822789756",
                    "237560669741354849155324534241975580671"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiCode.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-86ca1dd8",
                "digest": {
                  "length": 564,
                  "function_hash": "51591770797161872647002203357123709031"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiFilesys.c",
                  "function": "jsi_GetHomeDir"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-87face4d",
                "digest": {
                  "length": 7032,
                  "function_hash": "235332049556865105711380087498260344787"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiSqlite.c",
                  "function": "jsi_DbQuery"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-946e9547",
                "digest": {
                  "length": 1269,
                  "function_hash": "65973735843778764838168399337756807110"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiSqlite.c",
                  "function": "jsiSqlFunc"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-979d9c23",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "176691082724854670170913011762119768864",
                    "12832981228771614031559050545058375441",
                    "292076083074697871939817891085194598614",
                    "181021841408953629786033506025676698063"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiHash.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-98bdfef2",
                "digest": {
                  "length": 798,
                  "function_hash": "112740205574751088706209742168993537690"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiEval.c",
                  "function": "jsi_evalprint"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-a1e392f9",
                "digest": {
                  "length": 686,
                  "function_hash": "225084018455962647061024722528388668504"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiCmds.c",
                  "function": "DebugRemoveCmd_"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-a96428ca",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "192269889328134400374699461852007758505",
                    "252254979986111593999498355627197632793",
                    "162793184869940371346199157352302786152",
                    "98734828692776616462541566761107437811",
                    "257679630153038976801027816571198677488",
                    "268344535279219886999421910914219135958",
                    "2879517755389011644880288181262470083",
                    "140138178412403668018618586990360004371"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiMySql.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-a98decfd",
                "digest": {
                  "length": 24911,
                  "function_hash": "42649256682702442220893772996839753224"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiEval.c",
                  "function": "jsi_evalcode_sub"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-ae1e9a36",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "6069348810108189882486599677204904274",
                    "114090016993590244116028492479589835961",
                    "11160333628267808325915396882386042621",
                    "318446355456536671394612947007944626927",
                    "298156357315084132920393976488674400660",
                    "30030792503913827017782437836722924022",
                    "86830440208100168636697271930519112646",
                    "116651797057875471203822848854026663624",
                    "82366390092987587898826942787236885257",
                    "248025351036546603815355734629136802801",
                    "311841043764905983315685065559928884262",
                    "293574282615669443427238625543677786141",
                    "37534677105633359933257120805155923490",
                    "259605177192160231901493610901643489196",
                    "266514365857785468752696014209692363814",
                    "171738206839130314273521166789759460461",
                    "37534677105633359933257120805155923490",
                    "259605177192160231901493610901643489196",
                    "239089502716024242203335161250301803904",
                    "297862914519714767152095278221074170283",
                    "205945338955559426184380166556105281680",
                    "202376047487682595521667481158205979614",
                    "246285781084717547714414952840718575942",
                    "236022881893397738143188547455364021258",
                    "102686511610577103151214062566891240571",
                    "195693389398997474923001474186927297775"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiCmds.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-b245f8ad",
                "digest": {
                  "length": 363,
                  "function_hash": "78233521130904894769609992030734259331"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiHash.c",
                  "function": "jsi_hashFmtKey"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-b6deeaae",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "9621761567264054900614643609386055627",
                    "455573796435682049161909268330869663",
                    "180879210031896806594511667362424857497",
                    "181010147307090592423090918516442375471"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiJSON.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-b915e05f",
                "digest": {
                  "length": 351,
                  "function_hash": "101917794388646919278665529301404019407"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiSqlite.c",
                  "function": "dbOutputHexBlob"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-bfa800b2",
                "digest": {
                  "length": 2181,
                  "function_hash": "200206835580222350637862794788624966685"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiFunc.c",
                  "function": "jsi_StaticArgTypeCheck"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-c37b2a82",
                "digest": {
                  "length": 1181,
                  "function_hash": "162526071584203288985067084348293579652"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiSqlite.c",
                  "function": "dbEvalSetColumn"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-c58ed3df",
                "digest": {
                  "length": 12666,
                  "function_hash": "166273231804880720311086506139919585475"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiWebSocket.c",
                  "function": "jsi_wsHttp"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-cf7e970f",
                "digest": {
                  "length": 593,
                  "function_hash": "247066881902026683593697269678714745739"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiNumber.c",
                  "function": "NumberToPrecisionCmd"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-cfeed90a",
                "digest": {
                  "length": 1505,
                  "function_hash": "277795659864902799304870594853541744235"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiEval.c",
                  "function": "jsi_evalcode"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-dbbf825c",
                "digest": {
                  "length": 363,
                  "function_hash": "78233521130904894769609992030734259331"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiTree.c",
                  "function": "jsi_treeFmtKey"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-dca02454",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "224216298786500645330759020180771161501",
                    "162054761743852363259779548925499282426",
                    "331293937891797214511140305619307036664",
                    "171190448913735090286447574436309853386",
                    "267693085486711960857424593148772675090",
                    "12832981228771614031559050545058375441",
                    "292076083074697871939817891085194598614",
                    "181021841408953629786033506025676698063"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiTree.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-e0935981",
                "digest": {
                  "length": 839,
                  "function_hash": "63913016121081953615874294796940733016"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiJSON.c",
                  "function": "jsonNewDString"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-e19c1386",
                "digest": {
                  "length": 405,
                  "function_hash": "210059215589514318797370300547164899230"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiPstate.c",
                  "function": "jsi_PstateSetFile"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-e935f4c4",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "167819720230835168207905187860391952164",
                    "38056033151567982511662728268660167161",
                    "135492462596743023539166784974119910224",
                    "8860984369474788812865781754919264642",
                    "318003647337659181379592622965321957693",
                    "267477679959644027675177314457187324860",
                    "27075366982289881805588792851876036789",
                    "240880916343566502559312353508910579003",
                    "242062203727890027531805383244065248766",
                    "127805338253159228180367443375127757535",
                    "92417579788491026467286265339422608504",
                    "43847160249637865614380836636120096991",
                    "156204373125310946565403951034177460794",
                    "36884907566442494085028796666071677960",
                    "263183347522367632633354166768886965798",
                    "129543618294011309281968615861845296003",
                    "290685498883900887692343789814988636648",
                    "56055001119874268985318953892372617088",
                    "222283602704176273433458833940385242015",
                    "184566447683991907402197964124388546386",
                    "323480918666309715256010992442295293235",
                    "206760812087556105418835525287205035675",
                    "218276708778349070886290622051612956973"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiWebSocket.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-f0df2ad4",
                "digest": {
                  "length": 1776,
                  "function_hash": "61522941398153306134989624463965135244"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiValue.c",
                  "function": "Jsi_ValueToString"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-f121572f",
                "digest": {
                  "length": 3226,
                  "function_hash": "296819094237038655610181803792293247013"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiValue.c",
                  "function": "jsi_ValueSubscript"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-f3893d4e",
                "digest": {
                  "length": 1168,
                  "function_hash": "216298719223408341038072709231405832101"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiMySql.c",
                  "function": "mdbEvalSetColumnJSON"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-f3c5858a",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "172405699132305668636781662475189195",
                    "240373029149458146729862886666853198018",
                    "212685375187569840912364095278905375489",
                    "255513929783857156705620966649909201640"
                  ]
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiFilesys.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-22873-fc257a24",
                "digest": {
                  "length": 888,
                  "function_hash": "96299958612216352013212663425538811082"
                },
                "source": "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18",
                "target": {
                  "file": "src/jsiNumber.c",
                  "function": "NumberToStringCmd"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              }
            ],
            "vanir_signatures_modified": "2026-10-20T13:54:07Z"
          }
        }
      ],
      "modified": "2026-10-20T13:54:07.069890349Z",
      "provider": "osv",
      "references": [
        "https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18"
      ],
      "provider_metadata": {
        "unresolved_ranges": [
          {
            "cpes": [
              "cpe:2.3:a:jsish:jsish:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "jsish:jsish",
            "extracted_events": [
              {
                "range": [
                  {
                    "fixed": "3.0.7"
                  }
                ],
                "source": "CPE_RANGE"
              }
            ]
          },
          {
            "extracted_events": [
              {
                "range": [
                  {
                    "fixed": "3.0.7"
                  }
                ],
                "source": "DESCRIPTION"
              }
            ]
          }
        ]
      }
    },
    "related_cves": [
      {
        "value": "CVE-2020-22873",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 388362,
  "published_at": "2021-07-13T15:15:08.423+00:00"
}