tocsin

Alpine/njs: critical 9.8

njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise_perform_then().

Action: Upgrade njs to 0.7.3-r0 or later.

Affected

introducedfixedlast affected
00.7.3-r0-

Fixed versions

0.7.3-r0

Sources

published · modified · JSON