| Reporter | Title | Published | Views | Family All 25 |
|---|---|---|---|---|
 | njs -- heap buffer overflow in XML exclusive canonicalization | 2 Sep 202600:00 | – | freebsd |
| angie-module-njs -- multiple vulnerabilities | 2 Sep 202600:00 | – | freebsd |
 | Important: nginx-mod-njs | 29 Sep 202600:00 | – | amazon |
 | CVE-2026-78689 | 2 Sep 202615:40 | – | alpinelinux |
 | CVE-2026-78689 affecting package nginx for versions less than 1.30.4-1 | 19 Sep 202602:59 | – | cbl_mariner |
 | CVE-2026-78689 | 2 Sep 202618:07 | – | circl |
 | CVE-2026-78689 NGINX ngx_http_js_module vulnerablility | 2 Sep 202615:40 | – | cvelist |
 | CVE-2026-78689 | 2 Sep 202615:40 | – | debiancve |
 | EUVD-2026-70142 | 2 Sep 202615:40 | – | euvd |
 | K000162602: NGINX ngx_http_js_module vulnerability CVE-2026-78689 | 2 Sep 202613:48 | – | f5 |
10
[
{
"defaultStatus": "unknown",
"modules": [
"ngx_http_js_module"
],
"product": "NGINX JavaScript",
"vendor": "F5",
"versions": [
{
"lessThan": "1.0.1",
"status": "affected",
"version": "0.7.10",
"versionType": "custom"
}
]
}
]| Source | Link |
|---|---|
| my | www.my.f5.com/manage/s/article/K000162602 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| SAML Response | request body | / | An unauthenticated remote attacker can trigger an out-of-bounds write via the xml.exclusiveC14n() method by providing a crafted XML namespace prefix list in a SAML message (specifically the InclusiveNamespaces/@PrefixList attribute) before signature verification. | CWE-122 |
| SAML Assertion | request body | / | An unauthenticated remote attacker can trigger an out-of-bounds write via the xml.exclusiveC14n() method by providing a crafted XML namespace prefix list in a SAML message (specifically the InclusiveNamespaces/@PrefixList attribute) before signature verification. | CWE-122 |
| SAML LogoutRequest | request body | / | An unauthenticated remote attacker can trigger an out-of-bounds write via the xml.exclusiveC14n() method by providing a crafted XML namespace prefix list in a SAML message (specifically the InclusiveNamespaces/@PrefixList attribute) before signature verification. | CWE-122 |
| SAML LogoutResponse | request body | / | An unauthenticated remote attacker can trigger an out-of-bounds write via the xml.exclusiveC14n() method by providing a crafted XML namespace prefix list in a SAML message (specifically the InclusiveNamespaces/@PrefixList attribute) before signature verification. | CWE-122 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
03 Sep 2026 13:06Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.18.1
CVSS 49.2
EPSS0.0076
SSVC