Cesanta MJS v2.20.0 exists to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c.
cesanta mjs 2.20.0