Njs
by Nginx
Source repositories
CVEs (47)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-28049 | Med | 0.00 | 5.5 | 0.01 | Apr 15, 2022 | NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c. | ||
| CVE-2022-27008 | Hig | 0.00 | 7.5 | 0.02 | Apr 14, 2022 | nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when a slow array appended element is fast array. | ||
| CVE-2022-27007 | Cri | 0.00 | 9.8 | 0.02 | Apr 14, 2022 | nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved with njs_function_frame_save(). | ||
| CVE-2022-25139 | Cri | 0.00 | 9.8 | 0.02 | Feb 14, 2022 | njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njs_await_fulfilled. | ||
| CVE-2021-46463 | Cri | 0.00 | 9.8 | 0.02 | Feb 14, 2022 | njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise_perform_then(). | ||
| CVE-2021-46462 | Hig | 0.00 | 7.5 | 0.02 | Feb 14, 2022 | njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njs_object_set_prototype in /src/njs_object.c. | ||
| CVE-2021-46461 | Cri | 0.00 | 9.8 | 0.03 | Feb 14, 2022 | njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c. |
- risk 0.00cvss 5.5epss 0.01
NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c.
- risk 0.00cvss 7.5epss 0.02
nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when a slow array appended element is fast array.
- risk 0.00cvss 9.8epss 0.02
nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved with njs_function_frame_save().
- risk 0.00cvss 9.8epss 0.02
njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njs_await_fulfilled.
- risk 0.00cvss 9.8epss 0.02
njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise_perform_then().
- risk 0.00cvss 7.5epss 0.02
njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njs_object_set_prototype in /src/njs_object.c.
- risk 0.00cvss 9.8epss 0.03
njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.
Page 3 of 3