Nginx · Njs · CVE-2019-11838
**Name of the Vulnerable Software and Affected Versions**
njs versions prior to 0.3.2
**Description**
The issue is related to a heap-based buffer overflow in Array.prototype.splice after a resize. This occurs due to mishandling of the njs array expand size in the njs array prototype splice function, located in njs/njs array.c.
**Recommendations**
For versions prior to 0.3.2, update to version 0.3.2 or later to resolve the issue.