nginx-stable-package-config

4 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-90439

  NGINX ngx_http_v3_module vulnerability

  NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This c…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Alpine Wolfi
  Sep 15, 2026
• Medium 6.5
  CVE-2026-56434

  NGINX ngx_http_ssi_module vulnerability

  NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticat…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 15, 2026
• Medium 4.8
  CVE-2026-48142

  NGINX ngx_http_charset_module vulnerability

  NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, …

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 17, 2026
• Medium 5.9
  CVE-2026-1642

  NGINX vulnerability

  A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's contro…

  F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 4, 2026