← All advisories

Unrated severityNVD Advisory· Published Feb 14, 2022· Updated Aug 3, 2024

CVE-2022-25139

CVE-2022-25139

Description

njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njs_await_fulfilled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Nginx/Njscpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=0.7.0

Patches

Vulnerability mechanics

References

3

github.com/nginx/njs/commit/6a07c2156a07ef307b6dcf3c2ca8571a5f1af7a6mitrex_refsource_MISC
github.com/nginx/njs/issues/451mitrex_refsource_MISC
security.netapp.com/advisory/ntap-20220303-0007/mitrex_refsource_CONFIRM

News mentions

0

No linked articles in our index yet.