VULNERABILITY INTELLIGENCE

CVE-2022-43286

CVSS score9.8 CRITICAL

EPSS probability1.13%

CISA KEVNot currently listed

Published2022-10-28

Last modified2026-06-17

Description

Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterator_call at njs_json.c.