CVE-2022-27008: F5 Njs

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when a slow array appended element is fast array.

Affected products

• F5 Njs: version 0.7.2 only

Published 2022-04-14. Last modified 2026-06-17.