BSD PortsVulnerable: version 0.7.2 is affected by 20 known vulnerabilities. See below.
wip/nginx-module-njs 0.7.2 NetBSD
- System
- NetBSD
- Repository
- pkgsrc-wip
- License
- 2-clause-bsd
- Categories
- wip
Description
Nginx (pronounced engine-x) is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Igor Sysoev started development of Nginx in 2002, with the first public release in 2004. Nginx now hosts nearly 12.18% (22.2M) of active sites across all domains. Nginx is known for its high performance, stability, rich feature set, simple configuration, and low resource consumption.
This package contains the njs modules for Nginx.
In the other systems
The newest version among them is 1.0.2, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | wip/nginx-module-njs | 0.7.2 behind since 2026-09-03 | 20 known | - | - | - |
| FreeBSD | lang/njs by name | 1.0.2 newest | none known | - | [email protected] | 2026-10-18 |
| OpenBSD | lang/njs by name | 0.9.1p0 behind since 2026-09-03 | no data | - | Sergey A. Osokin <[email protected]> | - |
| DragonFly | lang/njs by name | 0.8.5 behind since 2026-09-03 | 1 known | - | [email protected] | - |
| HardenedBSD | lang/njs by name | 1.0.1 behind since 2026-10-18 | no data | - | [email protected] | - |
| GhostBSD | lang/njs by name | 1.0.1 behind since 2026-10-18 | no data | - | [email protected] | - |
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/nginx-module-njs && make install cleanDependencies
No port depends on this one.
Known vulnerabilities 20
- njs: use-after-free (CVE-2022-27007)
- njs: buffer-overflow (CVE-2022-27008)
- njs: null-pointer-dereference (CVE-2022-28049)
- njs: denial-of-service (CVE-2022-29369)
- njs: denial-of-service (CVE-2022-29779)
- njs: denial-of-service (CVE-2022-29780)
- njs: denial-of-service (CVE-2022-30503)
- njs: denial-of-service (CVE-2022-31306)
- njs: denial-of-service (CVE-2022-31307)
- njs: denial-of-service (CVE-2022-32414)
- njs: denial-of-service (CVE-2022-34027)
- njs: denial-of-service (CVE-2022-34028)
- njs: out-of-bounds-read (CVE-2022-34029)
- njs: denial-of-service (CVE-2022-34030)
- njs: denial-of-service (CVE-2022-34031)
- njs: denial-of-service (CVE-2022-34032)
- njs: unspecified (CVE-2022-35173)
- njs: out-of-bounds-read (CVE-2022-38890)
- njs: unspecified (CVE-2022-43284)
- njs: unspecified (CVE-2022-43285)