CVE WATCH / VULNERABILITY DETAIL
CVE-2026-101019
MEDIUMCVSS 6.5NVD feed
Published 14 October 2026 · tracked since 15 October 2026
Description
Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an expl
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-107381 MEDIUM 6.5
- CVE-2026-104939 HIGH 7.5
- CVE-2026-101025 MEDIUM 5.3
- CVE-2020-37282 CRITICAL 9.8
- CVE-2026-98417
- CVE-2026-98418
- CVE-2026-98419
- CVE-2026-98420
- CVE-2026-98409
- CVE-2026-98410