There is an Assertion 'contextp->stacktopuint8 == LEXEREXPRESSIONSTART' at js-parser-expr.c:3565 in parserparse_expression in JerryScript 2.2.0.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-23308.json"