Skip to content
OpenAdvisories

Package · Alpine

njs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 8.1
    CVE-2026-8711

    NGINX JavaScript vulnerability

    NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invoking the ngx.fetch() operation from NGINX JavaScript. An unaut…

    F5 NGINX JavaScript nginx libnginx-mod-js Network devices Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-46463

    njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerabil…

    nginx njs Alpine
  • Unscored —
    CVE-2022-25139

    njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njs_await_fulfilled.

    nginx njs Alpine
  • Unscored —
    CVE-2021-46462

    njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njs_object_set_prototype in /s…

    nginx njs Alpine
  • Unscored —
    CVE-2021-46461

    njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src…

    nginx njs Alpine