Alpine/njs: critical 9.8
NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invokin
Action: Upgrade njs to 0.9.9-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.4 | 0.9.9-r0 | - |
Fixed versions
| 0.9.9-r0 |
Sources
published · modified · JSON