CVE-2022-25139

CVE-2022-25139 affects njs up to version 0.7.0 (used in NGINX). The issue is a heap use-after-free in njs_await_fulfilled. CVSS metrics indicate High/CRITICAL impact across confidentiality, integrity, and availability (BASE scores: 7.5/9.8). The connected documents confirm the vulnerable componen...

CVE-2020-19695

CVE-2020-19695 affects Nginx NJS (njs/njs_vm.c) with a buffer overflow in the njs_object_property handling, enabling a remote attacker to execute arbitrary code. Impact is high (network vector, no user interaction), with affected Nginx NJS builds prior to a patched release. Red Hat/Mariner notes ...

CVE-2020-19692

CVE-2020-19692 affects Nginx NJS v0feca92. The vulnerability is a Buffer Overflow in the njs_module_read function in njs_module.c, enabling a remote attacker to execute arbitrary code. Public sources describe Nginx NJS as a scripting component for Nginx, with references indicating this issue allo...