Vulnerabilities (CVE)

Filtered by vendor F5 Subscribe
Filtered by product Njs
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-34029 1 F5 1 Njs 2022-07-25 N/A 9.1 CRITICAL
Nginx NJS v0.7.4 was discovered to contain an out-of-bounds read via njs_scope_value at njs_scope.h.
CVE-2022-29379 1 F5 1 Njs 2022-06-03 7.5 HIGH 9.8 CRITICAL
** DISPUTED ** Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in unreleased development code that was not part of the 0.7.2, 0.7.3, or 0.7.4 release.
CVE-2022-27007 1 F5 1 Njs 2022-05-19 7.5 HIGH 9.8 CRITICAL
nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved with njs_function_frame_save().