{"id":"CVE-2022-31306","details":"Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_convert_to_slow_array at src/njs_array.c.","modified":"2026-10-28T10:29:02.152568411Z","published":"2022-06-21T12:57:30Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31306.json","cna_assigner":"mitre"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31306.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31306"},{"type":"REPORT","url":"https://github.com/nginx/njs/issues/481"},{"type":"FIX","url":"https://github.com/nginx/njs/commit/81af26364c21c196dd21fb5e14c7fa9ce7debd17"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/nginx/njs","events":[{"introduced":"50bb20a814c3c82b662c999630ce91ff068e3e48"},{"fixed":"81af26364c21c196dd21fb5e14c7fa9ce7debd17"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:f5:njs:0.7.2:*:*:*:*:*:*:*","range":[{"introduced":"0.7.2"},{"last_affected":"0.7.2"}],"source":"CPE_STRING"},{"range":[{"fixed":"81af26364c21c196dd21fb5e14c7fa9ce7debd17"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["0.7.2","0.7.3"],"database_specific":{"vanir_signatures":[{"id":"CVE-2022-31306-28554a97","signature_type":"Line","signature_version":"v1","source":"https://github.com/nginx/njs/commit/81af26364c21c196dd21fb5e14c7fa9ce7debd17","target":{"file":"src/njs_array.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["339780529824448762995081143268585307509","307618025260381001810494025737045594026","172528107696331865071435248872457299656"]}},{"target":{"function":"njs_array_convert_to_slow_array","file":"src/njs_array.c"},"deprecated":false,"digest":{"length":534,"function_hash":"215556108678597644341992690666548962217"},"id":"CVE-2022-31306-4b4f7ba4","signature_type":"Function","signature_version":"v1","source":"https://github.com/nginx/njs/commit/81af26364c21c196dd21fb5e14c7fa9ce7debd17"},{"target":{"file":"src/test/njs_unit_test.c"},"deprecated":false,"digest":{"line_hashes":["190712008055766476213710584150190909322","278877165799828088263803208765066226626","22499050152622226168925891562274199600"],"threshold":0.9},"id":"CVE-2022-31306-fb559019","signature_type":"Line","signature_version":"v1","source":"https://github.com/nginx/njs/commit/81af26364c21c196dd21fb5e14c7fa9ce7debd17"}],"vanir_signatures_modified":"2026-10-28T10:29:02Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31306.json"}}],"schema_version":"1.9.2"}