Skip to content
Threat Feed
Subscribe

Vendor

Fabrice Bellard

1 brief RSS
high advisory

Out-of-Bounds Write in NGINX JavaScript (njs) XML Module

CVE-2026-78689 allows remote unauthenticated attackers to trigger an out-of-bounds heap write in the NGINX JavaScript (njs) and QuickJS (qjs) XML module via crafted namespace prefix lists.

njs +2 vulnerability denial-of-service cve-2026-78689
1c