| Package | Affected versions | Patched versions |
|---|---|---|
| njs | ≤ 0.3.3 |
njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free