Alpine/nginx: critical 9.8
njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise_perform_then().
Action: Upgrade nginx to 1.20.2-r2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.20.2-r2 | - |
Fixed versions
| 1.20.2-r2 |
Sources
published · modified · JSON