CVE catalog

CVE-2021-46462

ALPINE-CVE-2021-46462

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.69% · Oct 25, 2026

njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njs_object_set_prototype in /src/njs_object.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Alpinenginx3.161.20.2-r2fixed
Alpinenginx3.171.20.2-r2fixed
Alpinenginx3.181.20.2-r2fixed
Alpinenginx3.191.20.2-r2fixed
Alpinenginx3.201.20.2-r2fixed
Alpinenginx3.211.20.2-r2fixed
Alpinenginx3.221.20.2-r2fixed
Alpinenginx3.231.20.2-r2fixed
Alpinenginx3.241.20.2-r2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Alpinenginxapk3.161.20.2-r2Not reportedALPINE-CVE-2021-46462Not reported
Alpinenginxapk3.171.20.2-r2Not reportedALPINE-CVE-2021-46462Not reported
Alpinenginxapk3.181.20.2-r2Not reportedALPINE-CVE-2021-46462Not reported
Alpinenginxapk3.191.20.2-r2Not reportedALPINE-CVE-2021-46462Not reported
Alpinenginxapk3.201.20.2-r2Not reportedALPINE-CVE-2021-46462Not reported
Alpinenginxapk3.211.20.2-r2Not reportedALPINE-CVE-2021-46462Not reported
Alpinenginxapk3.221.20.2-r2Not reportedALPINE-CVE-2021-46462Not reported
Alpinenginxapk3.231.20.2-r2Not reportedALPINE-CVE-2021-46462Not reported
Alpinenginxapk3.241.20.2-r2Not reportedALPINE-CVE-2021-46462Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References