Alpine/nginx: critical 9.8

njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njs_await_fulfilled.

Action: Upgrade nginx to 1.20.2-r2 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-25139
• https://security.alpinelinux.org/vuln/CVE-2022-25139

published 2022-02-14T22:15:08.317Z · modified 2026-10-15T07:17:54.172429010Z · JSON