CVE-2022-29379

9.8 criticalEPSS 1.8%

Critical (9.8) in f5 njs. EPSS 1.8% chance of exploitation in the next 30 days.

Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in unreleased development code that was not part of the 0.7.2, 0.7.3, or 0.7.4 release

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2022-05-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

f5:njs

References

https://github.com/nginx/njs/commit/ab1702c7af9959366a5ddc4a75b4357d4e9ebdc1
https://github.com/nginx/njs/issues/491
https://github.com/nginx/njs/issues/493
https://github.com/nginx/njs/commit/ab1702c7af9959366a5ddc4a75b4357d4e9ebdc1
https://github.com/nginx/njs/issues/491

Check your stack JSON