VendorsNginxnjsall versions
Vulnerabilities

Nginx NJS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2021-46461
njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.
Published 2022-02-14 · Modified
9.8EPSS 0.031
CVE-2022-35173
An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation.
Published 2022-08-18 · Modified
7.5EPSS 0.014
CVE-2022-29779
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.
Published 2022-05-27 · Modified
5.5EPSS 0.004
CVE-2022-29780
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.
Published 2022-05-27 · Modified
5.5EPSS 0.004
CVE-2022-30503
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.
Published 2022-05-27 · Modified
5.5EPSS 0.003