| Package | Affected versions | Patched versions |
|---|---|---|
| njs | ≤ 0.4.3 |
njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free