← All advisories

Critical severity9.8NVD Advisory· Published Feb 14, 2022· Updated Jun 17, 2026

CVE-2021-46461

CVE-2021-46461

Description

njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Nginx/Njsllm-fuzzy3 versions
<=0.7.0+ 2 more
- (no CPE)range: <=0.7.0
- (no CPE)
- cpe:2.3:a:nginx:njs:*:*:*:*:*:*:*:*range: <=0.7.0

Patches

Vulnerability mechanics

References

3

github.com/nginx/njs/commit/d457c9545e7e71ebb5c0479eb16b9d33175855e2nvdPatchVendor Advisory
github.com/nginx/njs/issues/450nvdExploitThird Party Advisory
security.netapp.com/advisory/ntap-20220303-0007/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.