Known vulnerabilities in nginx-mod-js-challenge
Vendor:
Fedoraproject
Software:
nginx-mod-js-challenge
Software CPE:
cpe:2.3:o:fedoraproject:nginx-mod-js-challenge:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
13
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137847 - Heap-based Buffer Overflow CVE-2026-42533 |
CWE-122 | High | 0^20230517.gitda6852d-11.fc45 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 8 more |
||
| #VU137846 - Use of Uninitialized Resource CVE-2026-60005 |
CWE-908 | High | 0^20230517.gitda6852d-11.fc45 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 6 more |
||
| #VU137845 - Use After Free CVE-2026-56434 |
CWE-416 | Medium | 0^20230517.gitda6852d-11.fc45 | 16.07.2026 |
SB2026071606 SB20260721112 SB20260721113 and 6 more |
||
| #VU134864 - Out-of-bounds read CVE-2026-48142 |
CWE-125 | Medium | 0^20230517.gitda6852d-9.fc44, 0^20230517.gitda6852d-9.fc45 | 18.06.2026 |
SB2026061844 SB2026061845 SB2026061846 and 10 more |
||
| #VU134863 - Use After Free CVE-2026-42530 |
CWE-416 | High | 0^20230517.gitda6852d-9.fc44, 0^20230517.gitda6852d-9.fc45 | 18.06.2026 |
SB2026061844 SB2026061845 SB2026061846 and 2 more |
||
| #VU134861 - Heap-based Buffer Overflow CVE-2026-42055 |
CWE-122 | High | 0^20230517.gitda6852d-9.fc44, 0^20230517.gitda6852d-9.fc45 | 18.06.2026 |
SB2026061844 SB2026061845 SB2026061846 and 12 more |
||
| #VU132220 - Heap-based Buffer Overflow CVE-2026-9256 |
CWE-122 | Critical | 0^20230517.gitda6852d-8.fc44 | 25.05.2026 |
SB2026052502 SB2026052504 SB2026052505 and 12 more |
||
| #VU131379 - Use After Free CVE-2026-40701 |
CWE-416 | Medium | 0^20230517.gitda6852d-7.fc44 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 12 more |
||
| #VU131378 - Authentication Bypass by Spoofing CVE-2026-40460 |
CWE-290 | Medium | 0^20230517.gitda6852d-7.fc44 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 4 more |
||
| #VU131377 - Heap-based Buffer Overflow CVE-2026-42945 |
CWE-122 | Critical | 0^20230517.gitda6852d-7.fc44 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 26 more |
||
| #VU131376 - CVE-2026-42926 |
Medium | 0^20230517.gitda6852d-7.fc44 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 1 more |
|||
| #VU131375 - Uncontrolled Memory Allocation CVE-2026-42946 |
CWE-789 | Medium | 0^20230517.gitda6852d-7.fc44 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 14 more |
||
| #VU131374 - Out-of-bounds read CVE-2026-42934 |
CWE-125 | Medium | 0^20230517.gitda6852d-7.fc44 | 14.05.2026 |
SB2026051401 SB2026051497 SB2026051498 and 12 more |