F5 Njs vulnerabilities

• f5 nginx javascript, njs +1 more NGINX JavaScript vulnerability CVE-2026-8711 Fix available 9.2 CriticalMay 19, 2026
• f5 njs Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function... CVE-2023-27730 7.5 HighApril 9, 2023
• f5 njs Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return... CVE-2023-27729 7.5 HighApril 9, 2023
• f5 njs Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function... CVE-2023-27728 7.5 HighApril 9, 2023
• f5 njs Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function... CVE-2023-27727 7.5 HighApril 9, 2023
• f5 njs Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the... CVE-2020-19695 Fix available 9.8 CriticalApril 4, 2023
• f5 njs Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute... CVE-2020-19692 Fix available 9.8 CriticalApril 4, 2023
• f5 njs Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory... CVE-2022-43286 9.8 CriticalOctober 28, 2022
• f5 njs Nginx NJS v0.7.4 was discovered to contain a segmentation violation in njs_promise_reaction_job. CVE-2022-43285 Fix availableDisputed 7.5 HighOctober 28, 2022
• f5 njs Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via... CVE-2022-43284 Disputed 7.5 HighOctober 28, 2022
• f5 njs Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njs_utf8_next at src... CVE-2022-38890 5.5 MediumSeptember 15, 2022
• f5 njs Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function... CVE-2022-34032 7.5 HighJuly 18, 2022
• f5 njs Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_value_to_number at... CVE-2022-34031 7.5 HighJuly 18, 2022
• f5 njs Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_djb_hash at src... CVE-2022-34030 7.5 HighJuly 18, 2022
• f5 njs Nginx NJS v0.7.4 was discovered to contain an out-of-bounds read via njs_scope_value at njs_scope.h. CVE-2022-34029 9.1 CriticalJuly 18, 2022
• f5 njs Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_utf8_next at src... CVE-2022-34028 7.5 HighJuly 18, 2022
• f5 njs Nginx NJS v0.7.4 was discovered to contain a segmentation violation via njs_value_property at... CVE-2022-34027 7.5 HighJuly 18, 2022
• f5 njs Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function... CVE-2022-32414 5.5 MediumJune 21, 2022
• f5 njs Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function... CVE-2022-31307 5.5 MediumJune 21, 2022
• f5 njs Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function... CVE-2022-31306 5.5 MediumJune 21, 2022
• f5 njs Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function... CVE-2022-29379 Disputed 9.8 CriticalMay 25, 2022
• f5 njs Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at... CVE-2022-29369 7.5 HighMay 12, 2022
• f5 njs NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component... CVE-2022-28049 5.5 MediumApril 15, 2022
• f5 njs nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try... CVE-2022-27007 9.8 CriticalApril 14, 2022
• f5 njs nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when... CVE-2022-27008 7.5 HighApril 14, 2022
• f5 njs njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a... CVE-2021-46463 Fix available 9.8 CriticalFebruary 14, 2022
• f5 njs njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in... CVE-2022-25139 Fix available 9.8 CriticalFebruary 14, 2022
• f5 njs njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via... CVE-2021-46462 Fix available 7.5 HighFebruary 14, 2022
• f5 njs njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in... CVE-2020-24346 7.8 HighAugust 13, 2020
• f5 njs njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in... CVE-2020-24347 Fix available 5.5 MediumAugust 13, 2020
• f5 njs njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in... CVE-2020-24348 5.5 MediumAugust 13, 2020
• f5 njs njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c... CVE-2020-24349 5.5 MediumAugust 13, 2020
• f5 njs njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt... CVE-2019-13617 6.5 MediumJuly 16, 2019
• f5 njs njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c.... CVE-2019-13067 9.8 CriticalJune 29, 2019
• f5 njs njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in... CVE-2019-12208 9.8 CriticalMay 20, 2019
• f5 njs njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt... CVE-2019-12207 9.8 CriticalMay 20, 2019
• f5 njs njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c. CVE-2019-12206 9.8 CriticalMay 20, 2019
• f5 njs njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after... CVE-2019-11839 9.8 CriticalMay 9, 2019
• f5 njs njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice... CVE-2019-11838 9.8 CriticalMay 9, 2019
• f5 njs njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for... CVE-2019-11837 7.5 HighMay 9, 2019