PT-2022-17096 · Nginx · Njs

CVE-2022-25139

Published

2022-02-14

Updated

2026-04-21

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions njs versions through 0.7.0

Description A heap use-after-free issue was discovered in njs await fulfilled, affecting njs used in NGINX.

Recommendations For versions through 0.7.0, consider disabling the njs await fulfilled function until a patch is available.

Exploit

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

CLEANSTART-2026-AF45008

CLEANSTART-2026-BA37192

CLEANSTART-2026-MQ02912

CLEANSTART-2026-XB16901

CLEANSTART-2026-ZN32454

CLEANSTART-2026-ZT77083

CVE-2022-25139

Njs