[Git][security-tracker-team/security-tracker][master] Add CVE-2026-18329/libnginx-mod-js

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Sep 4 08:48:10 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a4a7aeea by Salvatore Bonaccorso at 2026-09-04T09:47:35+02:00
Add CVE-2026-18329/libnginx-mod-js

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1512,7 +1512,8 @@ CVE-2026-18986 (Improper Neutralization of Input During Web Page Generation ("Cr
 CVE-2026-18672 (In Progress\xae Telerik\xae UI for AJAX prior to v2026.3.812, insuffic ...)
 	NOT-FOR-US: Progress Software
 CVE-2026-18329 (Description  NGINX JavaScript (njs)and QuickJS (qjs) engineshave a vul ...)
-	TODO: check
+	- libnginx-mod-js 1.0.1-1
+	NOTE: https://my.f5.com/manage/s/article/K000162599
 CVE-2026-18058 (The mobile Smart Connect dashboard UI was subject to manipulation by 3 ...)
 	NOT-FOR-US: Lenovo
 CVE-2026-17563 (The User Frontend WordPress plugin before 4.3.11 does not enforce its  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a4a7aeeac114e42d0ecbd51507219a5806730133

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a4a7aeeac114e42d0ecbd51507219a5806730133
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260904/e1d52ddf/attachment.htm>


More information about the debian-security-tracker-commits mailing list