CVE-2022-43286: F5 Njs

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterator_call at njs_json.c.

Affected products

• F5 Njs: version 0.7.2 only

Published 2022-10-28. Last modified 2026-06-17.