CVE-2022-43284: F5 Njs

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input.

Affected products

• F5 Njs: from 0.7.2, up to and including 0.7.4

Published 2022-10-28. Last modified 2026-06-17.