PatchTheCVEnjs vulnerabilities and fixes
Recent CVEs affecting njs, with upgrade or downgrade steps. 1 tracked.
njs has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-05-19. Highest priority: CVE-2026-8711 (score 62/100).
- CVE-2026-8711 HIGH 8.1 UPGRADE NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-
FAQ
How do I fix njs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is njs being exploited right now?
None of the tracked njs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which njs CVE should I patch first?
CVE-2026-8711 currently ranks highest (62/100): NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-.