Debian/libnginx-mod-js: critical 9.8
NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invokin
Action: Upgrade libnginx-mod-js to 0.9.9-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.9-1 | - |
Fixed versions
| 0.9.9-1 |
Sources
published · modified · JSON