Alpine/nginx: critical 9.8

njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.

Action: Upgrade nginx to 1.20.2-r2 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-46461#Alpine:v3.18/nginx
• https://security.alpinelinux.org/vuln/CVE-2021-46461

published 2022-02-14T22:15:07.717Z · modified 2026-10-23T17:17:56.230575733Z · JSON