NJ
Product
Njs
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 16Medium 9Low 0
Watch
Add Njs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13617 | 6.5 | Jul 16 | njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that… Affected: through 0.3.3 |
| CVE-2022-38890 | 5.5 | Sep 15 | Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njs_utf8_next at src/njs_utf8.h Affected: 0.7.7 |
| CVE-2022-32414 | 5.5 | Jun 21 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_vmcode_interpreter at src/njs_vmcode.c Affected: 0.7.2 |
| CVE-2022-31307 | 5.5 | Jun 21 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_string_offset at src/njs_string.c Affected: 0.7.2 |
| CVE-2022-31306 | 5.5 | Jun 21 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_convert_to_slow_array at src/njs_array.c Affected: 0.7.2 |
| CVE-2022-28049 | 5.5 | Apr 15 | NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c Affected: 0.7.2 |
| CVE-2020-24349 | 5.5 | Aug 13 | njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c Affected: through 0.4.3 |
| CVE-2020-24348 | 5.5 | Aug 13 | njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c Affected: through 0.4.3 |
| CVE-2020-24347 | 5.5 | Aug 13 | njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c Affected: through 0.4.3 |
Showing 9