CVE-2022-28049: F5 Njs

Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days.

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c.

Affected products

• F5 Njs: version 0.7.2 only

Published 2022-04-15. Last modified 2026-06-17.