GCVE - cpe:2.3:a:f5:njs:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:f5:njs:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	F5 (`cb05c4a2-e02e-586f-b9d0-d0370178d1e5`)
Product	Njs (`64a63a69-ce48-5598-8fc9-44f3975a185a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/nginx/njs`	purl2cpe	2026-06-01 10:11:25.650129

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-43284`	vulnerable	2026-06-08 05:49:31.251441	Details available Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input. Published: 2022-10-28T00:00:00.000Z Updated: 2024-08-03T13:26:02.864Z Open on db.gcve.eu Reference links https://github.com/nginx/njs/issues/470 https://github.com/nginx/njs/issues/529	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25139`	vulnerable	2026-06-08 05:41:45.208805	Details available njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njs_await_fulfilled. Published: 2022-02-14T21:47:20.000Z Updated: 2024-08-03T04:29:01.781Z Open on db.gcve.eu Reference links https://github.com/nginx/njs/issues/451 https://github.com/nginx/njs/commit/6a07c2156a07ef307b6dcf3c2ca8571a5f1af7a6 https://security.netapp.com/advisory/ntap-20220303-0007/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46463`	vulnerable	2026-06-08 05:38:03.420924	Details available njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise_perform_then(). Published: 2022-02-14T21:47:24.000Z Updated: 2024-08-04T05:10:33.895Z Open on db.gcve.eu Reference links https://github.com/nginx/njs/issues/447 https://github.com/nginx/njs/commit/6a40a85ff239497c6458c7dbef18f6a2736fe992 https://security.netapp.com/advisory/ntap-20220303-0007/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46462`	vulnerable	2026-06-08 05:38:03.420165	Details available njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njs_object_set_prototype in /src/njs_object.c. Published: 2022-02-14T21:47:18.000Z Updated: 2024-08-04T05:10:35.002Z Open on db.gcve.eu Reference links https://github.com/nginx/njs/issues/449 https://github.com/nginx/njs/commit/39e8fa1b7db1680654527f8fa0e9ee93b334ecba https://security.netapp.com/advisory/ntap-20220303-0007/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24349`	vulnerable	2026-06-08 05:22:32.827285	Details available njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface. Published: 2020-08-13T18:51:50.000Z Updated: 2024-08-04T15:12:08.786Z Open on db.gcve.eu Reference links https://cwe.mitre.org/data/definitions/416.html https://github.com/nginx/njs/issues/324 https://security.netapp.com/advisory/ntap-20200918-0001/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24348`	vulnerable	2026-06-08 05:22:32.826964	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24347`	vulnerable	2026-06-08 05:22:32.826474	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24346`	vulnerable	2026-06-08 05:22:32.825960	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-19695`	vulnerable	2026-06-08 05:20:57.400461	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-19692`	vulnerable	2026-06-08 05:20:57.396652	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13617`	vulnerable	2026-06-08 05:12:52.215712	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13067`	vulnerable	2026-06-08 05:12:40.844226	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12208`	vulnerable	2026-06-08 05:12:38.686127	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12207`	vulnerable	2026-06-08 05:12:38.685854	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12206`	vulnerable	2026-06-08 05:12:38.685581	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-11839`	vulnerable	2026-06-08 05:12:38.177207	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-11838`	vulnerable	2026-06-08 05:12:38.176896	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-11837`	vulnerable	2026-06-08 05:12:38.176505	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.