CVE-2022-29379

Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in unreleased development code that was not part of the 0.7.2, 0.7.3, or 0.7.4 release

• CWE-787

• https://github.com/nginx/njs/commit/ab1702c7af9959366a5ddc4a75b4357d4e9ebdc1Patch, Third Party Advisory
• https://github.com/nginx/njs/issues/491Issue Tracking, Third Party Advisory
• https://github.com/nginx/njs/issues/493Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/nginx/njs/commit/ab1702c7af9959366a5ddc4a75b4357d4e9ebdc1Patch, Third Party Advisory
• https://github.com/nginx/njs/issues/491Issue Tracking, Third Party Advisory
• https://github.com/nginx/njs/issues/493Exploit, Issue Tracking, Patch, Third Party Advisory

Published

May 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29363Phpok v6.1 was discovered to contain a deserialization vulne…9.8
• CVE-2022-29368Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75…7.1
• CVE-2022-29369Nginx NJS v0.7.2 was discovered to contain a segmentation vi…7.5
• CVE-2022-2937The Image Hover Effects Ultimate plugin for WordPress is vul…5.4
• CVE-2022-29376Xampp for Windows v8.1.4 and below was discovered to contain…8.8
• CVE-2022-29377Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to co…7.5
• CVE-2022-2938A flaw was found in the Linux kernel's implementation of Pre…7.8
• CVE-2022-29380Academy-LMS v4.3 was discovered to contain a stored cross-si…4.8
• CVE-2022-29383NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was…9.8
• CVE-2022-2939The WP Cerber Security plugin for WordPress is vulnerable to…5.3
• CVE-2022-29391TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to con…9.8
• CVE-2022-29392TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to con…9.8