Amazon Linux 2023 : nginx-mod-njs (ALAS2023-2026-3300)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3300 advisory. DescriptionNGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and...

Important: nginx-mod-njs

Issue Overview: Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return...

Important: nginx-mod-njs

Issue Overview: Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An...