CVE-2022-43285: F5 Njs

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Nginx NJS v0.7.4 was discovered to contain a segmentation violation in njs_promise_reaction_job. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input.

Affected products

• F5 Njs: version 0.7.4 only

Published 2022-10-28. Last modified 2026-06-17.