Skip to content
OpenAdvisories

Package · Debian

nginx

73 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-28753

    NGINX ngx_mail_proxy_module vulnerability

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses. This allows an attacker-controlled DNS server to inject arbitrary headers into SMTP upstream requests, le…

    F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Alpine
  • Low 3.7
    CVE-2025-53859

    NGINX ngx_mail_smtp_module vulnerability

    NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to th…

    F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Alpine