Nginx Njs — known CVE vulnerabilities

Every CVE whose affected-product data names Nginx Njs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-46461 — CVSS 9.8 (critical): njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.
• CVE-2022-35173 — CVSS 7.5 (high): An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code…
• CVE-2022-29779 — CVSS 5.5 (medium): Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.
• CVE-2022-29780 — CVSS 5.5 (medium): Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.
• CVE-2022-30503 — CVSS 5.5 (medium): Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.