Skip to content
OpenAdvisories
Unscored USN-8425-1 0 CVEs

libnginx-mod-js vulnerability

Published Jun 11, 2026 · Updated Jun 18, 2026

Summary

It was discovered that njs did not properly handle certain client-
controlled variables when processing ngx.fetch() requests. An attacker
could possibly use this issue to trigger a heap buffer overflow, resulting
in arbitrary code execution or a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 26.04 LTS Pro:26.04:LTS libnginx-mod-js 0.9.4-1ubuntu0.1~esm1

References

  • report
    https://ubuntu.com/security/CVE-2026-8711