{"id":"CVE-2026-42055","aliases":["ALPINE-CVE-2026-42055","ALSA-2026:36331","ALSA-2026:36364","ALSA-2026:36618","ALSA-2026:36639","ALSA-2026:38847","AZL-91419","BELL-CVE-2026-42055","BIT-nginx-2026-42055","BIT-nginx-gateway-2026-42055","BIT-nginx-gateway-fabric-2026-42055","CLSA-2026-1783696553","CLSA-2026-1784714136","CLSA-2026-1784714329","CLSA-2026-1784714664","CLSA-2026-1784807256","CLSA-2026-1785845612","CLSA-2026-1790152715","CLSA-2026-1791460658","DEBIAN-CVE-2026-42055","EUVD-2026-37718","GHSA-78jw-ww3g-9wp7","MGASA-2026-0279","OESA-2026-2798","OESA-2026-2799","OESA-2026-2800","OESA-2026-2801","RHSA-2026:27197","RHSA-2026:36331","RHSA-2026:36364","RHSA-2026:36618","RHSA-2026:36639","RHSA-2026:38847","RLSA-2026:36331","RLSA-2026:36364","RLSA-2026:36618","RLSA-2026:36639","RLSA-2026:38847","SUSE-SU-2026:22943-1","SUSE-SU-2026:22951-1","SUSE-SU-2026:3329-1","SUSE-SU-2026:3448-1","UBUNTU-CVE-2026-42055","USN-8458-1","openSUSE-SU-2026:11066-1","openSUSE-SU-2026:21439-1"],"status":"published","title":"NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","severity":{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.06537,"percentile":0.9389,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-122","CWE-131","CWE-787"],"published":"2026-06-17T14:04:32Z","modified":"2026-11-05T19:03:31Z","exploits":[{"source":"pocgithub","id":"HORKimhab/CVE-2026-42055","title":"HORKimhab/CVE-2026-42055","date":"2026-06-19","url":"https://github.com/HORKimhab/CVE-2026-42055"}],"fixes":[{"ecosystem":"Alpine:v3.21","package":"nginx","fixed_in":["1.26.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nginx","fixed_in":["1.28.3-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nginx","fixed_in":["1.28.3-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nginx","fixed_in":["1.30.3-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-all-modules","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-core","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-filesystem","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","fixed_in":["2:1.20.1-28.el9_8.4.alma.1","1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1","2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-all-modules","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-core","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-filesystem","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-devel","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-http-image-filter","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-http-perl","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-http-xslt-filter","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-mail","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-stream","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx","fixed_in":["1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-all-modules","fixed_in":["1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-filesystem","fixed_in":["1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-devel","fixed_in":["1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-http-image-filter","fixed_in":["1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-http-perl","fixed_in":["1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-mail","fixed_in":["1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-stream","fixed_in":["1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"nginx","fixed_in":["1.28.3-8"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"nginx","fixed_in":["1.28.3-r6"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"nginx","fixed_in":["1.30.3-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"nginx","fixed_in":["1.30.3","1.31.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"nginx-gateway","fixed_in":["1.30.3","1.31.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"nginx-gateway-fabric","fixed_in":["2.6.4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-all-modules","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-core","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-filesystem","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-devel","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-image-filter","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-perl","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-mail","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-stream","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx","fixed_in":["1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-all-modules","fixed_in":["1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-filesystem","fixed_in":["1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-image-filter","fixed_in":["1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-perl","fixed_in":["1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-mail","fixed_in":["1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-stream","fixed_in":["1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx","fixed_in":["1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-all-modules","fixed_in":["1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-filesystem","fixed_in":["1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-image-filter","fixed_in":["1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-perl","fixed_in":["1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-mail","fixed_in":["1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-stream","fixed_in":["1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx","fixed_in":["1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-all-modules","fixed_in":["1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-filesystem","fixed_in":["1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-image-filter","fixed_in":["1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-perl","fixed_in":["1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-mail","fixed_in":["1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-stream","fixed_in":["1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-all-modules","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-core","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-filesystem","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-devel","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-image-filter","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-perl","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-xslt-filter","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-mail","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-stream","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-auth-pam","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-cache-purge","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-dav-ext","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-echo","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-fancyindex","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-geoip","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-headers-more-filter","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-image-filter","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-lua","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-ndk","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-perl","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-subs-filter","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-uploadprogress","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-upstream-fair","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-xslt-filter","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-mail","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-nchan","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-rtmp","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-stream","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-common","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-doc","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-extras","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-full","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-light","fixed_in":["1.14.2-2+deb10u5+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-auth-pam","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-cache-purge","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-dav-ext","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-echo","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-fancyindex","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-geoip","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-headers-more-filter","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-image-filter","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-lua","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-ndk","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-perl","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-subs-filter","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-uploadprogress","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-upstream-fair","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-xslt-filter","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-mail","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-nchan","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-rtmp","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-stream","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-common","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-core","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-doc","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-extras","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-full","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-light","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-auth-pam","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-cache-purge","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-dav-ext","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-echo","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-fancyindex","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip2","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-headers-more-filter","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-image-filter","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-lua","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-ndk","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-perl","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-subs-filter","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-uploadprogress","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-upstream-fair","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-xslt-filter","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-mail","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-nchan","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-rtmp","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-stream","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-common","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-core","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-doc","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-extras","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-full","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-light","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nginx","fixed_in":["1.22.1-9+deb12u9"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nginx","fixed_in":["1.26.3-3+deb13u7"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nginx","fixed_in":["1.30.1-5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4","1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-core-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debugsource","fixed_in":["2:1.20.1-28.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-devel","fixed_in":["2:1.20.1-28.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-image-filter-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-perl-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-xslt-filter-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-mail-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-stream-debuginfo","fixed_in":["2:1.20.1-28.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-all-modules","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core-debuginfo","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debuginfo","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debugsource","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-filesystem","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter-debuginfo","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl-debuginfo","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter-debuginfo","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail-debuginfo","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream-debuginfo","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-devel","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-devel","fixed_in":["1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3","2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-all-modules","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debugsource","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-filesystem","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-devel","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"nginx","fixed_in":["2:1.20.1-28.el9_8.4.rocky.0.1","1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1","1:1.24.0-7.module+el9.8.0+40218+76099d32.2.rocky.0.1","2:1.26.3-9.module+el9.8.0+40222+e48d13b6.1","2:1.26.3-9.module+el9.8.0+40194+40adfc1b"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"nginx","fixed_in":["2:1.26.3-6.el10_2.5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"nginx","fixed_in":["1:1.24.0-3.module+el8.10.0+40144+38158758","1:1.24.0-3.module+el8.10.0+40187+52bedf24.1","1:1.24.0-3.module+el8.10.0+40220+e6a4bcb0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nginx","fixed_in":["1.18.0-6ubuntu14.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"nginx","fixed_in":["1.24.0-2ubuntu7.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"nginx","fixed_in":["1.28.0-6ubuntu1.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"nginx","fixed_in":["1.28.3-2ubuntu1.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+281+75d5e6d4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-8"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.28.0-r3"},{"fixed":"1.28.3-r6"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.22.1-r0"},{"fixed":"1.30.3-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"nginx","ranges":[{"type":"SEMVER","events":[{"introduced":"1.30.0"},{"fixed":"1.30.3"},{"introduced":"1.31.0"},{"fixed":"1.31.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"nginx-gateway","ranges":[{"type":"SEMVER","events":[{"introduced":"1.30.0"},{"fixed":"1.30.3"},{"introduced":"1.31.0"},{"fixed":"1.31.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"nginx-gateway-fabric","ranges":[{"type":"SEMVER","events":[{"introduced":"1.3.0"},{"fixed":"2.6.4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2441+0bf13828.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2443+582c92f5.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2442+7e98b948.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-auth-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-cache-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-dav-ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-echo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-fancyindex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-headers-more-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-ndk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-subs-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-uploadprogress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-upstream-fair","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-nchan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-rtmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-full","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-auth-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-cache-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-dav-ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-echo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-fancyindex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-headers-more-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-ndk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-subs-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-uploadprogress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-upstream-fair","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-nchan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-rtmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-full","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-auth-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-cache-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-dav-ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-echo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-fancyindex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-headers-more-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-ndk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-subs-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-uploadprogress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-upstream-fair","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-nchan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-rtmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-full","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.1-9+deb12u9"}]}],"versions":["1.22.1-9","1.22.1-9+deb12u1","1.22.1-9+deb12u2","1.22.1-9+deb12u3","1.22.1-9+deb12u4","1.22.1-9+deb12u5","1.22.1-9+deb12u6","1.22.1-9+deb12u7","1.22.1-9+deb12u8"]},{"source":"osv","ecosystem":"Debian:13","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-3+deb13u7"}]}],"versions":["1.26.3-3","1.26.3-3+deb13u1","1.26.3-3+deb13u2","1.26.3-3+deb13u3","1.26.3-3+deb13u4","1.26.3-3+deb13u5","1.26.3-3+deb13u6"]},{"source":"osv","ecosystem":"Debian:14","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.1-5"}]}],"versions":["1.26.3-3","1.28.0-1","1.28.0-2","1.28.0-3","1.28.0-4","1.28.0-5","1.28.0-6","1.28.1-1","1.28.1-2","1.28.1-3","1.28.2-1","1.28.2-2","1.28.2-3","1.28.2-4","1.28.3-1","1.28.3-2","1.30.0-1","1.30.0-2","1.30.0-3","1.30.0-4","1.30.1-1","1.30.1-2","1.30.1-3","1.30.1-4"]},{"source":"osv","ecosystem":"Mageia:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.3-1.mga10"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.3-1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-15.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-17.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-13.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-13.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-stream-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24501+a1e882cd.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24503+61c7c092.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.4.rocky.0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+40218+76099d32.2.rocky.0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+40222+e48d13b6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+40194+40adfc1b"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40144+38158758"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40187+52bedf24.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40220+e6a4bcb0.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.2-160000.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.2-160000.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.2-160000.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.2-160000.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150600.10.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150600.10.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150600.10.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1-3ubuntu1","1.4.3-2ubuntu1","1.4.4-1ubuntu1","1.4.4-2ubuntu1","1.4.4-4ubuntu1","1.4.5-1ubuntu1","1.4.6-1ubuntu2","1.4.6-1ubuntu3","1.4.6-1ubuntu3.1","1.4.6-1ubuntu3.2","1.4.6-1ubuntu3.3","1.4.6-1ubuntu3.4","1.4.6-1ubuntu3.5","1.4.6-1ubuntu3.6","1.4.6-1ubuntu3.7","1.4.6-1ubuntu3.8","1.4.6-1ubuntu3.9","1.4.6-1ubuntu3.9+esm1","1.4.6-1ubuntu3.9+esm2","1.4.6-1ubuntu3.9+esm3","1.4.6-1ubuntu3.9+esm4","1.4.6-1ubuntu3.9+esm5","1.4.6-1ubuntu3.9+esm6","1.4.6-1ubuntu3.9+esm8","1.4.6-1ubuntu3.9+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.3-1ubuntu1","1.9.6-2ubuntu1","1.9.6-2ubuntu2","1.9.9-0ubuntu1","1.9.9-1ubuntu1","1.9.10-0ubuntu1","1.9.10-1ubuntu1","1.9.11-0ubuntu1","1.9.11-0ubuntu2","1.9.12-0ubuntu1","1.9.13-0ubuntu1","1.9.14-0ubuntu1","1.9.15-0ubuntu1","1.10.0-0ubuntu0.16.04.1","1.10.0-0ubuntu0.16.04.2","1.10.0-0ubuntu0.16.04.3","1.10.0-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.1","1.10.3-0ubuntu0.16.04.2","1.10.3-0ubuntu0.16.04.3","1.10.3-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.5","1.10.3-0ubuntu0.16.04.5+esm1","1.10.3-0ubuntu0.16.04.5+esm2","1.10.3-0ubuntu0.16.04.5+esm3","1.10.3-0ubuntu0.16.04.5+esm4","1.10.3-0ubuntu0.16.04.5+esm5","1.10.3-0ubuntu0.16.04.5+esm6","1.10.3-0ubuntu0.16.04.5+esm7","1.10.3-0ubuntu0.16.04.5+esm9","1.10.3-0ubuntu0.16.04.5+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.1-0ubuntu2","1.13.6-2ubuntu1","1.13.6-2ubuntu2","1.13.10-1ubuntu1","1.13.12-0ubuntu1","1.14.0-0ubuntu1","1.14.0-0ubuntu1.1","1.14.0-0ubuntu1.2","1.14.0-0ubuntu1.3","1.14.0-0ubuntu1.4","1.14.0-0ubuntu1.5","1.14.0-0ubuntu1.6","1.14.0-0ubuntu1.7","1.14.0-0ubuntu1.9","1.14.0-0ubuntu1.10","1.14.0-0ubuntu1.11","1.14.0-0ubuntu1.11+esm1","1.14.0-0ubuntu1.11+esm2","1.14.0-0ubuntu1.11+esm4","1.14.0-0ubuntu1.11+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.1-0ubuntu2","1.16.1-0ubuntu3","1.17.5-0ubuntu1","1.17.6-0ubuntu1","1.17.7-0ubuntu1","1.17.8-0ubuntu1","1.17.8-0ubuntu2","1.17.8-0ubuntu3","1.17.9-0ubuntu1","1.17.9-0ubuntu2","1.17.9-0ubuntu3","1.17.10-0ubuntu1","1.18.0-0ubuntu1","1.18.0-0ubuntu1.2","1.18.0-0ubuntu1.3","1.18.0-0ubuntu1.4","1.18.0-0ubuntu1.5","1.18.0-0ubuntu1.6","1.18.0-0ubuntu1.7","1.18.0-0ubuntu1.7+esm1","1.18.0-0ubuntu1.7+esm3","1.18.0-0ubuntu1.7+esm4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-6ubuntu14.16"}]}],"versions":["1.18.0-6ubuntu11","1.18.0-6ubuntu12","1.18.0-6ubuntu14","1.18.0-6ubuntu14.1","1.18.0-6ubuntu14.2","1.18.0-6ubuntu14.3","1.18.0-6ubuntu14.4","1.18.0-6ubuntu14.5","1.18.0-6ubuntu14.6","1.18.0-6ubuntu14.7","1.18.0-6ubuntu14.8","1.18.0-6ubuntu14.10","1.18.0-6ubuntu14.11","1.18.0-6ubuntu14.12","1.18.0-6ubuntu14.13","1.18.0-6ubuntu14.14","1.18.0-6ubuntu14.15"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-2ubuntu7.13"}]}],"versions":["1.24.0-1ubuntu1","1.24.0-2ubuntu1","1.24.0-2ubuntu2","1.24.0-2ubuntu3","1.24.0-2ubuntu4","1.24.0-2ubuntu6","1.24.0-2ubuntu7","1.24.0-2ubuntu7.1","1.24.0-2ubuntu7.3","1.24.0-2ubuntu7.4","1.24.0-2ubuntu7.5","1.24.0-2ubuntu7.6","1.24.0-2ubuntu7.7","1.24.0-2ubuntu7.8","1.24.0-2ubuntu7.9","1.24.0-2ubuntu7.10","1.24.0-2ubuntu7.11","1.24.0-2ubuntu7.12"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.0-6ubuntu1.8"}]}],"versions":["1.26.3-2ubuntu1","1.26.3-3ubuntu1","1.26.3-3ubuntu2","1.26.3-3ubuntu3","1.28.0-3ubuntu1","1.28.0-4ubuntu1","1.28.0-6ubuntu1","1.28.0-6ubuntu1.1","1.28.0-6ubuntu1.2","1.28.0-6ubuntu1.3","1.28.0-6ubuntu1.4","1.28.0-6ubuntu1.5","1.28.0-6ubuntu1.6","1.28.0-6ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-2ubuntu1.6"}]}],"versions":["1.28.0-6ubuntu1","1.28.1-2ubuntu1","1.28.1-3ubuntu1","1.28.2-2ubuntu1","1.28.3-2ubuntu1","1.28.3-2ubuntu1.1","1.28.3-2ubuntu1.2","1.28.3-2ubuntu1.3","1.28.3-2ubuntu1.4","1.28.3-2ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-6ubuntu14.16"}]}],"versions":["1.18.0-6ubuntu11","1.18.0-6ubuntu12","1.18.0-6ubuntu14","1.18.0-6ubuntu14.1","1.18.0-6ubuntu14.2","1.18.0-6ubuntu14.3","1.18.0-6ubuntu14.4","1.18.0-6ubuntu14.5","1.18.0-6ubuntu14.6","1.18.0-6ubuntu14.7","1.18.0-6ubuntu14.8","1.18.0-6ubuntu14.10","1.18.0-6ubuntu14.11","1.18.0-6ubuntu14.12","1.18.0-6ubuntu14.13","1.18.0-6ubuntu14.14","1.18.0-6ubuntu14.15"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-2ubuntu7.13"}]}],"versions":["1.24.0-1ubuntu1","1.24.0-2ubuntu1","1.24.0-2ubuntu2","1.24.0-2ubuntu3","1.24.0-2ubuntu4","1.24.0-2ubuntu6","1.24.0-2ubuntu7","1.24.0-2ubuntu7.1","1.24.0-2ubuntu7.3","1.24.0-2ubuntu7.4","1.24.0-2ubuntu7.5","1.24.0-2ubuntu7.6","1.24.0-2ubuntu7.7","1.24.0-2ubuntu7.8","1.24.0-2ubuntu7.9","1.24.0-2ubuntu7.10","1.24.0-2ubuntu7.11","1.24.0-2ubuntu7.12"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.0-6ubuntu1.8"}]}],"versions":["1.26.3-2ubuntu1","1.26.3-3ubuntu1","1.26.3-3ubuntu2","1.26.3-3ubuntu3","1.28.0-3ubuntu1","1.28.0-4ubuntu1","1.28.0-6ubuntu1","1.28.0-6ubuntu1.1","1.28.0-6ubuntu1.2","1.28.0-6ubuntu1.3","1.28.0-6ubuntu1.4","1.28.0-6ubuntu1.5","1.28.0-6ubuntu1.6","1.28.0-6ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-2ubuntu1.6"}]}],"versions":["1.28.0-6ubuntu1","1.28.1-2ubuntu1","1.28.1-3ubuntu1","1.28.2-2ubuntu1","1.28.3-2ubuntu1","1.28.3-2ubuntu1.1","1.28.3-2ubuntu1.2","1.28.3-2ubuntu1.3","1.28.3-2ubuntu1.4","1.28.3-2ubuntu1.5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.2-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.2-160000.6.1"}]}],"bundled":3}],"products":[{"vendor":"f5","product":"dos"},{"vendor":"f5","product":"nginx open source"},{"vendor":"f5","product":"nginx plus"},{"vendor":"f5","product":"nginx_gateway_fabric"},{"vendor":"f5","product":"nginx_ingress_controller"},{"vendor":"f5","product":"nginx_instance_manager"},{"vendor":"f5","product":"nginx_open_source"},{"vendor":"f5","product":"nginx_plus"},{"vendor":"f5","product":"waf"},{"vendor":"red hat","product":"red hat discovery 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift data foundation 4"},{"vendor":"red hat","product":"red hat update infrastructure 5"},{"vendor":"redhat","product":"discovery"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"hardened_images"},{"vendor":"redhat","product":"update_infrastructure"}],"references":[{"url":"https://my.f5.com/manage/s/article/K000161584","tags":["vendor-advisory","Vendor Advisory","advisory","web","article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42055","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2489866","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42055.json","tags":["x_sadp-csaf-vex","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36364","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:38847","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36618","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36331","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36639","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46836","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27197","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:44481","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42055","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-78jw-ww3g-9wp7"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-42055","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2489866","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-36331.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-36364.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-36618.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-36639.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-38847.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-42055","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1783696553.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1784714136.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1784714329.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1784714664.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784807256.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1785845612.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1790152715.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1791460658.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-42055","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0279.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35750","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8458-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLAG3KT4JVKUFDRLDTUDAIB4KDUXBVGU/","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00285.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48142","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2799","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2800","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2801","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48142","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27197.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42055","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2489858","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48142","tags":["advisory"]},{"url":"https://my.f5.com/manage/s/article/K000161585","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36331.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36364.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36618.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36639.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38847.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:36331","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:36364","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:36618","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:36639","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:38847","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622943-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1265228","tags":["report"]},{"url":"https://bugzilla.suse.com/1267525","tags":["report"]},{"url":"https://bugzilla.suse.com/1268492","tags":["report"]},{"url":"https://bugzilla.suse.com/1268495","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48142","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622951-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263329-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263448-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271514","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42533","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-42055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-48142","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42530","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-42055","title":"NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-17T14:04:32.52Z","modified":"2026-09-14T12:04:28.53Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-122","CWE-131"],"updated_at":"2026-11-02T13:40:23.731501Z"}],"euvd":[{"id":"EUVD-2026-37718","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-17T14:04:32Z","modified":"2026-09-14T12:04:28Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T17:28:21.2136Z"}],"ghsa":[{"id":"GHSA-78jw-ww3g-9wp7","title":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and...","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-17T18:35:56Z","modified":"2026-08-25T15:33:46Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122","CWE-131","CWE-787"],"updated_at":"2026-11-02T15:10:57.434403Z"}],"nvd":[{"id":"CVE-2026-42055","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-17T15:16:50.353Z","modified":"2026-09-14T13:18:34.69Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122","CWE-787","CWE-131"],"updated_at":"2026-11-02T14:12:24.544761Z"}],"osv":[{"id":"ALPINE-CVE-2026-42055","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-17T15:16:50.353Z","modified":"2026-10-01T02:17:49.289957444Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-42055","status":"published","published":"2026-06-20T06:12:56.844503Z","modified":"2026-06-27T07:15:04.557993628Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.844435Z"},{"id":"CVE-2026-42055","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-17T15:16:50.353Z","modified":"2026-10-24T10:30:34.737664257Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:45:04.117819Z"},{"id":"DEBIAN-CVE-2026-42055","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-17T15:16:50.353Z","modified":"2026-10-01T03:03:11.763983317Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"OESA-2026-2798","title":"nginx security update","description":"NGINX is a free, open-source, high-performance HTTP server and reverse proxy,  as well as an IMAP/POP3 proxy server.\r\n\r\nSecurity Fix(es):\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-42055)\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-48142)","status":"published","published":"2026-07-06T11:11:43Z","modified":"2026-08-18T01:21:12.299176078Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2799","title":"nginx security update","description":"NGINX is a free, open-source, high-performance HTTP server and reverse proxy,  as well as an IMAP/POP3 proxy server.\r\n\r\nSecurity Fix(es):\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-42055)\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-48142)","status":"published","published":"2026-07-06T11:11:43Z","modified":"2026-08-18T01:21:12.334262221Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2800","title":"nginx security update","description":"NGINX is a free, open-source, high-performance HTTP server and reverse proxy,  as well as an IMAP/POP3 proxy server.\r\n\r\nSecurity Fix(es):\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-42055)\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-48142)","status":"published","published":"2026-07-06T11:11:43Z","modified":"2026-08-18T01:21:12.603945252Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2801","title":"nginx security update","description":"NGINX is a free, open-source, high-performance HTTP server and reverse proxy,  as well as an IMAP/POP3 proxy server.\r\n\r\nSecurity Fix(es):\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-42055)\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf-8; and a charset directive (for example, charset koi8-r;) configured, remote, unauthenticated attackers can send requests (in conjunction with conditions beyond their control) to cause a heap buffer over-read in the NGINX worker process, leading to limited disclosure of memory or a restart. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-48142)","status":"published","published":"2026-07-06T11:11:43Z","modified":"2026-08-18T01:21:12.207659502Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"RHSA-2026:27197","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-06-27T10:24:48Z","modified":"2026-10-09T10:24:13Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:36331","title":"Red Hat Security Advisory: nginx security, bug fix, and enhancement update","status":"published","published":"2026-07-08T10:09:23Z","modified":"2026-09-12T10:06:45Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36364","title":"Red Hat Security Advisory: nginx security, bug fix, and enhancement update","status":"published","published":"2026-07-08T10:09:27Z","modified":"2026-09-12T10:06:46Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36618","title":"Red Hat Security Advisory: nginx:1.24 security, bug fix, and enhancement update","status":"published","published":"2026-07-09T10:12:37Z","modified":"2026-09-12T10:06:47Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36639","title":"Red Hat Security Advisory: nginx:1.26 security, bug fix, and enhancement update","status":"published","published":"2026-07-09T10:12:40Z","modified":"2026-09-12T10:06:48Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:38847","title":"Red Hat Security Advisory: nginx:1.24 security, bug fix, and enhancement update","status":"published","published":"2026-07-14T10:09:16Z","modified":"2026-09-12T10:07:12Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RLSA-2026:36331","title":"Important: nginx security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\nBug Fix(es) and Enhancement(s):\n\n* nginx: \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [rhel-9.8.z] (JIRA:Rocky Linux-190800)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-29T18:03:49.873824Z","modified":"2026-07-29T18:25:42.075100082Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:36364","title":"Important: nginx security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\nBug Fix(es) and Enhancement(s):\n\n* \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [rhel-10.2.z] (JIRA:Rocky Linux-191778)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-08T12:06:21.540749Z","modified":"2026-07-08T12:30:04.372710933Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:36618","title":"Important: nginx:1.24 security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\nBug Fix(es) and Enhancement(s):\n\n* nginx:1.24/nginx: \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [rhel-9.8.z] (JIRA:Rocky Linux-191773)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-08T12:03:53.587615Z","modified":"2026-07-08T12:30:04.376675763Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:36639","title":"Important: nginx:1.26 security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\nBug Fix(es) and Enhancement(s):\n\n* nginx:1.26/nginx: \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [rhel-9.8.z] (JIRA:Rocky Linux-191774)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-08T18:03:20.135265Z","modified":"2026-07-08T18:26:01.163930557Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:38847","title":"Important: nginx:1.24 security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\nBug Fix(es) and Enhancement(s):\n\n* \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [rhel-8.10.z] (JIRA:Rocky Linux-191779)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-13T12:01:07.269263Z","modified":"2026-07-13T12:30:04.948875144Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-42055","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-19T00:00:00Z","modified":"2026-11-05T19:03:31.942625623Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-05T19:27:31.887219Z"},{"id":"ALSA-2026:36331","title":"Important: nginx security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * nginx: \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-190800)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-07T00:00:00Z","modified":"2026-10-29T11:32:35.117740838Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:36364","title":"Important: nginx security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [almalinux-10.2.z] (JIRA:AlmaLinux-191778)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-07T00:00:00Z","modified":"2026-10-29T11:30:29.727457726Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:36618","title":"Important: nginx:1.24 security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * nginx:1.24/nginx: \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-191773)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-08T00:00:00Z","modified":"2026-10-29T11:32:35.083775391Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:36639","title":"Important: nginx:1.26 security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * nginx:1.26/nginx: \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-191774)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-08T00:00:00Z","modified":"2026-10-29T11:32:35.41545789Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:38847","title":"Important: nginx:1.24 security, bug fix, and enhancement update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * \"HTTP/2 bomb\" nginx fix breaks module ABI causing crashes [almalinux-8.10.z] (JIRA:AlmaLinux-191779)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-13T00:00:00Z","modified":"2026-10-29T11:02:24.72640715Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-91419","title":"CVE-2026-42055 affecting package nginx for versions less than 1.28.3-8","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-17T15:16:50Z","modified":"2026-09-22T05:34:53Z","updated_at":"2026-11-02T15:28:11.397546Z"},{"id":"BIT-nginx-2026-42055","title":"NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-22T05:47:00.524Z","modified":"2026-09-08T08:48:16.791833306Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"BIT-nginx-gateway-2026-42055","title":"NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-22T05:47:02.594Z","modified":"2026-09-08T08:48:16.799476351Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"BIT-nginx-gateway-fabric-2026-42055","title":"NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-27T05:47:56.049Z","modified":"2026-09-08T08:48:16.762664428Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"CLSA-2026-1783696553","title":"nginx: Fix of CVE-2026-42055","description":"- fix CVE-2026-42055: HPACK field-length validation in HTTP/2 gRPC request\n  builder and HTTP/2 response header filter; fields exceeding\n  NGX_HTTP_V2_MAX_FIELD now return NGX_ERROR instead of overflowing the\n  4-byte HPACK length prefix","status":"published","published":"2026-07-10T15:16:09Z","modified":"2026-10-26T09:30:25.008204995Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1784714136","title":"nginx: Fix of CVE-2026-42055","description":"- CVE-2026-42055: fix heap buffer overflow when proxying HTTP/2/gRPC upstream\n  with oversized (\u003e2M) request header fields","status":"published","published":"2026-07-22T09:56:09Z","modified":"2026-10-26T09:31:50.612184162Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784714329","title":"nginx: Fix of CVE-2026-42055","description":"- CVE-2026-42055: fix heap buffer overflow when proxying HTTP/2/gRPC upstream\n  with oversized (\u003e2M) request header fields","status":"published","published":"2026-07-22T09:59:14Z","modified":"2026-10-26T09:31:38.410336012Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784714664","title":"nginx: Fix of CVE-2026-42055","description":"- CVE-2026-42055: fix heap buffer overflow when proxying HTTP/2/gRPC upstream\n  with oversized (\u003e2M) request header fields","status":"published","published":"2026-07-22T10:04:49Z","modified":"2026-10-26T09:31:51.125649796Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784807256","title":"nginx: Fix of CVE-2026-42055","description":"- CVE-2026-42055: limit HTTP/2 header field length in ngx_http_grpc_module to avoid heap buffer overflow when proxying to a gRPC upstream","status":"published","published":"2026-07-23T11:48:01Z","modified":"2026-10-26T09:31:21.628513188Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785845612","title":"Fix CVE(s): CVE-2026-42055","description":"   * SECURITY UPDATE: Heap buffer overflow in ngx_http_grpc_module when\n     proxying oversized headers to a gRPC/HTTP/2 upstream\n     - debian/patches/CVE-2026-42055.patch: reject request line and header\n       fields longer than NGX_HTTP_V2_MAX_FIELD in\n       ngx_http_grpc_create_request to prevent buffer overrun when\n       large_client_header_buffers exceeds 2 megabytes and\n       ignore_invalid_headers is off\n     - CVE-2026-42055","status":"published","published":"2026-08-04T12:13:44Z","modified":"2026-10-26T09:31:52.775380178Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1790152715","title":"Fix CVE(s): CVE-2026-42055","description":"   * SECURITY UPDATE: heap buffer overflow via oversized HTTP/2 and gRPC upstream request headers\n     - debian/patches/CVE-2026-42055.patch: reject header fields longer than\n       NGX_HTTP_V2_MAX_FIELD in ngx_http_grpc_create_request() before the upstream\n       request buffer length is computed, and in ngx_http_v2_header_filter() for the\n       Content-Type and Location response header values\n     - CVE-2026-42055","status":"published","published":"2026-09-23T08:38:47Z","modified":"2026-10-26T09:32:04.179444494Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1791460658","title":"Fix CVE(s): CVE-2026-42055","description":"   * SECURITY UPDATE: buffer overflow in the gRPC upstream request builder via\n     overlong HTTP/2 header fields\n     - debian/patches/CVE-2026-42055.patch: reject a method name, URI, host,\n       configured header name or value, or forwarded client header name or\n       value longer than NGX_HTTP_V2_MAX_FIELD in\n       ngx_http_grpc_create_request(), so an oversized field can no longer\n       overflow the HPACK integer encoding the request buffer was sized for\n     - CVE-2026-42055","status":"published","published":"2026-10-08T11:57:52Z","modified":"2026-10-26T09:32:06.369011451Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"MGASA-2026-0279","title":"Updated nginx packages fix security vulnerabilities","description":"ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability.\n(CVE-2026-42055)\nngx_http_charset_module vulnerability. (CVE-2026-48142)\n","status":"published","published":"2026-07-20T19:06:32Z","modified":"2026-07-20T19:15:04.971557709Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11066-1","title":"nginx-1.31.2-1.1 on GA media","description":"These are all security issues fixed in the nginx-1.31.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-19T00:00:00Z","modified":"2026-06-20T08:45:08.6769413Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21439-1","title":"Security update for nginx","description":"This update for nginx fixes the following issues\n\n- CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228).\n- CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules (bsc#1268492).\n- CVE-2026-48142: heap buffer over-read in the ngx_http_charset_module module (bsc#1268495).\n- HTTP2-BOMB denial of service (bsc#1267525).\n","status":"published","published":"2026-07-24T07:39:50Z","modified":"2026-07-26T18:24:09.262136013Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22943-1","title":"Security update for nginx","description":"This update for nginx fixes the following issues\n\n- CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228).\n- CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules (bsc#1268492).\n- CVE-2026-48142: heap buffer over-read in the ngx_http_charset_module module (bsc#1268495).\n- HTTP2-BOMB denial of service (bsc#1267525).\n","status":"published","published":"2026-07-24T07:41:08Z","modified":"2026-07-29T18:24:22.280520639Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:22951-1","title":"Security update for nginx","description":"This update for nginx fixes the following issues\n\n- CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228).\n- CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules (bsc#1268492).\n- CVE-2026-48142: heap buffer over-read in the ngx_http_charset_module module (bsc#1268495).\n- HTTP2-BOMB denial of service (bsc#1267525).\n","status":"published","published":"2026-07-24T07:41:08Z","modified":"2026-07-29T18:24:23.563580535Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:3329-1","title":"Security update for nginx","description":"This update for nginx fixes the following issues\n\n- CVE-2026-42055: heap-based buffer overflow in the `ngx_http_proxy_v2_module` and `ngx_http_grpc_module` modules\n  (bsc#1268492).\n- CVE-2026-48142: heap buffer over-read in the `ngx_http_charset_module` module (bsc#1268495).\n- Remote denial of service via the HTTP/2 bomb exploit (bsc#1267525).\n","status":"published","published":"2026-07-28T09:34:38Z","modified":"2026-07-29T18:24:24.545452624Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3448-1","title":"Security update for nginx","description":"This update for nginx fixes the following issues:\n\n- CVE-2026-42055: heap buffer overflow in the `ngx_http_proxy_v2_module` and `ngx_http_grpc_module` modules\n  (bsc#1268492).\n- CVE-2026-42533: heap buffer overflow in the `map` directive and regex matching (bsc#1271514).\n- CVE-2026-48142: heap buffer overread in the `ngx_http_charset_module` module (bsc#1268495).\n- Remote denial of service via the HTTP/2 bomb exploit (bsc#1267525).\n","status":"published","published":"2026-08-03T11:17:02Z","modified":"2026-08-04T11:45:06.332788625Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8458-1","title":"nginx vulnerabilities","description":"It was discovered that nginx incorrectly handled large headers when\nproxying HTTP/2 traffic. A remote attacker could use this issue to cause\nnginx to crash, resulting in a denial of service, or possibly execute\narbitrary code. The default compiler options for affected releases should\nreduce the vulnerability to a denial of service. (CVE-2026-42055)\n\nIt was discovered that nginx incorrectly handled character set conversion\nunder certain circumstances. A remote attacker could possibly use this\nissue to obtain sensitive information or cause nginx to crash, resulting in\na denial of service. (CVE-2026-48142)","status":"published","published":"2026-06-22T13:28:02Z","modified":"2026-06-30T18:17:35.447433444Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}