CVE-2022-34027

Nginx NJS v0.7.4 was discovered to contain a segmentation violation via njsvalueproperty at njsvalue.c...

CVE-2022-34029

Scope and impact: CVE-2022-34029 affects Nginx NJS 0.7.4, with an out-of-bounds read via njs_scope_value in njs_scope.h. The vulnerability is described across multiple sources (e.g., NVD, Red Hat, osv.dev) as a high-severity issue with CVSS 3.1 base score 9.1, indicating critical impact to confid...

CVE-2022-34027

Summary: CVE-2022-34027 affects Nginx NJS 0.7.4. A vulnerability in the njs_value_property function (njs_value.c) may cause a segmentation fault and enable remote code execution. The CVSSv3.1 base score is 7.5 ( HIGH ), with network access, no user interaction required. Details from connected sou...

matestack-ui-core is vulnerable to XSS/Script injection

matestack-ui-core does not excape strings by default and does not cover this in the docs. matestack-ui-core should escape strings by default in order to prevent XSS/Script injection vulnerability. v0.7.4 fixes that by escaping strings by default...