Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsarraylength at src/mjs_array.c.