{"id":"CVE-2026-56434","aliases":["ALPINE-CVE-2026-56434","ALSA-2026:59216","ALSA-2026:59220","ALSA-2026:59362","ALSA-2026:59490","ALSA-2026:59496","AZL-92496","BELL-CVE-2026-56434","BIT-nginx-2026-56434","BIT-nginx-gateway-2026-56434","CLSA-2026-1787916225","CLSA-2026-1788337827","CLSA-2026-1788338106","CLSA-2026-1788365549","CLSA-2026-1792487559","CLSA-2026-1792768371","CLSA-2026-1792768506","DEBIAN-CVE-2026-56434","EUVD-2026-44684","GHSA-m73p-xg7q-m8f2","MGASA-2026-0301","OESA-2026-3216","RHSA-2026:46012","RHSA-2026:59216","RHSA-2026:59220","RHSA-2026:59362","RHSA-2026:59490","RHSA-2026:59496","RLSA-2026:59216","RLSA-2026:59220","RLSA-2026:59362","RLSA-2026:59490","RLSA-2026:59496","ROOT-OS-ALPINE-315-CVE-2026-56434","ROOT-OS-ALPINE-320-CVE-2026-56434","ROOT-OS-DEBIAN-11-CVE-2026-56434","ROOT-OS-DEBIAN-12-CVE-2026-56434","ROOT-OS-DEBIAN-13-CVE-2026-56434","UBUNTU-CVE-2026-56434","openSUSE-SU-2026:11295-1"],"status":"published","title":"NGINX ngx_http_ssi_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","severity":{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00486,"percentile":0.42328,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2026-07-15T14:33:46Z","modified":"2026-11-05T19:04:22Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"nginx","fixed_in":["1.26.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nginx","fixed_in":["1.28.3-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nginx","fixed_in":["1.28.3-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nginx","fixed_in":["1.30.4-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"nginx","fixed_in":["1.28.3-8"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"nginx","fixed_in":["1.30.4-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"nginx-base","fixed_in":["1.30.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"nginx","fixed_in":["1.30.4-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"nginx-base","fixed_in":["1.30.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"nginx","fixed_in":["1.30.4-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"nginx-base","fixed_in":["1.30.4-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"nginx-base","fixed_in":["1.30.4-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"nginx-base","fixed_in":["1.30.4-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"nginx-base","fixed_in":["1.30.4-r1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"nginx","fixed_in":["1.30.4","1.31.3"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"nginx-gateway","fixed_in":["1.30.4","1.31.3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-all-modules","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-core","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-filesystem","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-devel","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-image-filter","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-perl","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-mail","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-stream","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx","fixed_in":["1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-all-modules","fixed_in":["1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-filesystem","fixed_in":["1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-image-filter","fixed_in":["1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-perl","fixed_in":["1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-mail","fixed_in":["1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-stream","fixed_in":["1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx","fixed_in":["1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-all-modules","fixed_in":["1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-filesystem","fixed_in":["1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-image-filter","fixed_in":["1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-perl","fixed_in":["1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-mail","fixed_in":["1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-stream","fixed_in":["1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-all-modules","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-filesystem","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-devel","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-image-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-perl","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-mail","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-stream","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-all-modules","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-filesystem","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-devel","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-image-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-perl","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-mail","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-stream","fixed_in":["1:1.20.1-10.el7.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nginx","fixed_in":["1.22.1-9+deb12u10"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nginx","fixed_in":["1.26.3-3+deb13u8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nginx","fixed_in":["1.30.1-7"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"nginx","fixed_in":["1.20.2-r20074","1.20.2-r20071","1.20.2-r20072","1.20.2-r20073","1.20.2-r20075","1.20.2-r20076","1.20.2-r20077"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"rootio-nginx","fixed_in":["1.20.2-r20074","1.20.2-r20071","1.20.2-r20072","1.20.2-r20073","1.20.2-r20075","1.20.2-r20076","1.20.2-r20077"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"nginx","fixed_in":["1.26.3-r00072","1.26.3-r00073","1.26.3-r00074"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-nginx","fixed_in":["1.26.3-r00072","1.26.3-r00073","1.26.3-r00074"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"nginx","fixed_in":["1.18.0-6.1+deb11u8.aikido.3","1.18.0-6.1+deb11u8.aikido.4","1.18.0-6.1+deb11u8.aikido.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-nginx","fixed_in":["1.18.0-6.1+deb11u8.aikido.3","1.18.0-6.1+deb11u8.aikido.4","1.18.0-6.1+deb11u8.aikido.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nginx","fixed_in":["1.18.0-6ubuntu14.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"nginx","fixed_in":["1.24.0-2ubuntu7.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"nginx","fixed_in":["1.28.3-2ubuntu1.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4259+e9485ae5.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+300+0781a894.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-8"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.22.1-r0"},{"fixed":"1.30.4-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"nginx-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.30.3-r0"},{"fixed":"1.30.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.28.0-r3"},{"fixed":"1.30.4-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"nginx-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.30.3-r0"},{"fixed":"1.30.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.28.0-r3"},{"fixed":"1.30.4-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"nginx-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.30.3-r0"},{"fixed":"1.30.4-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"nginx-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.30.3-r0"},{"fixed":"1.30.4-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"nginx-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.30.3-r0"},{"fixed":"1.30.4-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"nginx-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.30.3-r0"},{"fixed":"1.30.4-r1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"nginx","ranges":[{"type":"SEMVER","events":[{"introduced":"0.8.11"},{"fixed":"1.30.4"},{"introduced":"1.31.0"},{"fixed":"1.31.3"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"nginx-gateway","ranges":[{"type":"SEMVER","events":[{"introduced":"0.8.11"},{"fixed":"1.30.4"},{"introduced":"1.31.0"},{"fixed":"1.31.3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2537+9cf51d86.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2538+95d8566a.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-auth-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-cache-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-dav-ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-echo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-fancyindex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-headers-more-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-ndk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-subs-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-uploadprogress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-upstream-fair","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-nchan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-rtmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-full","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els10"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.1-9+deb12u10"}]}],"versions":["1.22.1-9","1.22.1-9+deb12u1","1.22.1-9+deb12u2","1.22.1-9+deb12u3","1.22.1-9+deb12u4","1.22.1-9+deb12u5","1.22.1-9+deb12u6","1.22.1-9+deb12u7","1.22.1-9+deb12u8","1.22.1-9+deb12u9"]},{"source":"osv","ecosystem":"Debian:13","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-3+deb13u8"}]}],"versions":["1.26.3-3","1.26.3-3+deb13u1","1.26.3-3+deb13u2","1.26.3-3+deb13u3","1.26.3-3+deb13u4","1.26.3-3+deb13u5","1.26.3-3+deb13u6","1.26.3-3+deb13u7"]},{"source":"osv","ecosystem":"Debian:14","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.1-7"}]}],"versions":["1.26.3-3","1.28.0-1","1.28.0-2","1.28.0-3","1.28.0-4","1.28.0-5","1.28.0-6","1.28.1-1","1.28.1-2","1.28.1-3","1.28.2-1","1.28.2-2","1.28.2-3","1.28.2-4","1.28.3-1","1.28.3-2","1.30.0-1","1.30.0-2","1.30.0-3","1.30.0-4","1.30.1-1","1.30.1-2","1.30.1-3","1.30.1-4","1.30.1-5","1.30.1-6"]},{"source":"osv","ecosystem":"Mageia:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.4-1.mga10"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.4-1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-19.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-14.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-14.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-14.oe2403sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-17.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-stream-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.4-2.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24644+2676a8ce.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24626+085354fc.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24599+8fde0ff7.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40220+e6a4bcb0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40187+52bedf24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40249+a5ea815d.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40144+38158758"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40298+8ed65491.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.5.rocky.0.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+40218+76099d32.2.rocky.0.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+40234+d28db9b8.3.rocky.0.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+40235+8be1317a.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+40222+e48d13b6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+40194+40adfc1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-r20074"},{"fixed":"1.20.2-r20071"},{"fixed":"1.20.2-r20072"},{"fixed":"1.20.2-r20073"},{"fixed":"1.20.2-r20075"},{"fixed":"1.20.2-r20076"},{"fixed":"1.20.2-r20077"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"rootio-nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-r20074"},{"fixed":"1.20.2-r20071"},{"fixed":"1.20.2-r20072"},{"fixed":"1.20.2-r20073"},{"fixed":"1.20.2-r20075"},{"fixed":"1.20.2-r20076"},{"fixed":"1.20.2-r20077"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-r00072"},{"fixed":"1.26.3-r00073"},{"fixed":"1.26.3-r00074"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-r00072"},{"fixed":"1.26.3-r00073"},{"fixed":"1.26.3-r00074"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-6.1+deb11u8.aikido.3"},{"fixed":"1.18.0-6.1+deb11u8.aikido.4"},{"fixed":"1.18.0-6.1+deb11u8.aikido.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-6.1+deb11u8.aikido.3"},{"fixed":"1.18.0-6.1+deb11u8.aikido.4"},{"fixed":"1.18.0-6.1+deb11u8.aikido.5"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1-3ubuntu1","1.4.3-2ubuntu1","1.4.4-1ubuntu1","1.4.4-2ubuntu1","1.4.4-4ubuntu1","1.4.5-1ubuntu1","1.4.6-1ubuntu2","1.4.6-1ubuntu3","1.4.6-1ubuntu3.1","1.4.6-1ubuntu3.2","1.4.6-1ubuntu3.3","1.4.6-1ubuntu3.4","1.4.6-1ubuntu3.5","1.4.6-1ubuntu3.6","1.4.6-1ubuntu3.7","1.4.6-1ubuntu3.8","1.4.6-1ubuntu3.9","1.4.6-1ubuntu3.9+esm1","1.4.6-1ubuntu3.9+esm2","1.4.6-1ubuntu3.9+esm3","1.4.6-1ubuntu3.9+esm4","1.4.6-1ubuntu3.9+esm5","1.4.6-1ubuntu3.9+esm6","1.4.6-1ubuntu3.9+esm8","1.4.6-1ubuntu3.9+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.3-1ubuntu1","1.9.6-2ubuntu1","1.9.6-2ubuntu2","1.9.9-0ubuntu1","1.9.9-1ubuntu1","1.9.10-0ubuntu1","1.9.10-1ubuntu1","1.9.11-0ubuntu1","1.9.11-0ubuntu2","1.9.12-0ubuntu1","1.9.13-0ubuntu1","1.9.14-0ubuntu1","1.9.15-0ubuntu1","1.10.0-0ubuntu0.16.04.1","1.10.0-0ubuntu0.16.04.2","1.10.0-0ubuntu0.16.04.3","1.10.0-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.1","1.10.3-0ubuntu0.16.04.2","1.10.3-0ubuntu0.16.04.3","1.10.3-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.5","1.10.3-0ubuntu0.16.04.5+esm1","1.10.3-0ubuntu0.16.04.5+esm2","1.10.3-0ubuntu0.16.04.5+esm3","1.10.3-0ubuntu0.16.04.5+esm4","1.10.3-0ubuntu0.16.04.5+esm5","1.10.3-0ubuntu0.16.04.5+esm6","1.10.3-0ubuntu0.16.04.5+esm7","1.10.3-0ubuntu0.16.04.5+esm9","1.10.3-0ubuntu0.16.04.5+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.1-0ubuntu2","1.13.6-2ubuntu1","1.13.6-2ubuntu2","1.13.10-1ubuntu1","1.13.12-0ubuntu1","1.14.0-0ubuntu1","1.14.0-0ubuntu1.1","1.14.0-0ubuntu1.2","1.14.0-0ubuntu1.3","1.14.0-0ubuntu1.4","1.14.0-0ubuntu1.5","1.14.0-0ubuntu1.6","1.14.0-0ubuntu1.7","1.14.0-0ubuntu1.9","1.14.0-0ubuntu1.10","1.14.0-0ubuntu1.11","1.14.0-0ubuntu1.11+esm1","1.14.0-0ubuntu1.11+esm2","1.14.0-0ubuntu1.11+esm4","1.14.0-0ubuntu1.11+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.1-0ubuntu2","1.16.1-0ubuntu3","1.17.5-0ubuntu1","1.17.6-0ubuntu1","1.17.7-0ubuntu1","1.17.8-0ubuntu1","1.17.8-0ubuntu2","1.17.8-0ubuntu3","1.17.9-0ubuntu1","1.17.9-0ubuntu2","1.17.9-0ubuntu3","1.17.10-0ubuntu1","1.18.0-0ubuntu1","1.18.0-0ubuntu1.2","1.18.0-0ubuntu1.3","1.18.0-0ubuntu1.4","1.18.0-0ubuntu1.5","1.18.0-0ubuntu1.6","1.18.0-0ubuntu1.7","1.18.0-0ubuntu1.7+esm1","1.18.0-0ubuntu1.7+esm3","1.18.0-0ubuntu1.7+esm4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-6ubuntu14.17"}]}],"versions":["1.18.0-6ubuntu11","1.18.0-6ubuntu12","1.18.0-6ubuntu14","1.18.0-6ubuntu14.1","1.18.0-6ubuntu14.2","1.18.0-6ubuntu14.3","1.18.0-6ubuntu14.4","1.18.0-6ubuntu14.5","1.18.0-6ubuntu14.6","1.18.0-6ubuntu14.7","1.18.0-6ubuntu14.8","1.18.0-6ubuntu14.10","1.18.0-6ubuntu14.11","1.18.0-6ubuntu14.12","1.18.0-6ubuntu14.13","1.18.0-6ubuntu14.14","1.18.0-6ubuntu14.15","1.18.0-6ubuntu14.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-2ubuntu7.14"}]}],"versions":["1.24.0-1ubuntu1","1.24.0-2ubuntu1","1.24.0-2ubuntu2","1.24.0-2ubuntu3","1.24.0-2ubuntu4","1.24.0-2ubuntu6","1.24.0-2ubuntu7","1.24.0-2ubuntu7.1","1.24.0-2ubuntu7.3","1.24.0-2ubuntu7.4","1.24.0-2ubuntu7.5","1.24.0-2ubuntu7.6","1.24.0-2ubuntu7.7","1.24.0-2ubuntu7.8","1.24.0-2ubuntu7.9","1.24.0-2ubuntu7.10","1.24.0-2ubuntu7.11","1.24.0-2ubuntu7.12","1.24.0-2ubuntu7.13"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-2ubuntu1.7"}]}],"versions":["1.28.0-6ubuntu1","1.28.1-2ubuntu1","1.28.1-3ubuntu1","1.28.2-2ubuntu1","1.28.3-2ubuntu1","1.28.3-2ubuntu1.1","1.28.3-2ubuntu1.2","1.28.3-2ubuntu1.3","1.28.3-2ubuntu1.4","1.28.3-2ubuntu1.5","1.28.3-2ubuntu1.6"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.3-1.1"}]}],"bundled":3}],"products":[{"vendor":"f5","product":"nginx open source"},{"vendor":"f5","product":"nginx plus"},{"vendor":"f5","product":"nginx_gateway_fabric"},{"vendor":"f5","product":"nginx_ingress_controller"},{"vendor":"f5","product":"nginx_plus"},{"vendor":"f5","product":"waf"}],"references":[{"url":"https://my.f5.com/manage/s/article/K000162098","tags":["vendor-advisory","patch","Vendor Advisory","advisory","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56434","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m73p-xg7q-m8f2"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-56434","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59216","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56434","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-60005","tags":["report"]},{"url":"https://bugzilla.redhat.com/2500960","tags":["report"]},{"url":"https://bugzilla.redhat.com/2500992","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-59216.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59220","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-59220.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59362","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-59362.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59490","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-59490.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59496","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-59496.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-56434","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1787916225.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1788337827.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1788338106.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1788365549.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60005","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1792487559.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15176","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792768371.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792768506.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-56434","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0301.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35973","tags":["report"]},{"url":"https://my.f5.com/manage/s/article/K000162097","tags":["web","article"]},{"url":"https://my.f5.com/manage/s/article/K000162100","tags":["web","article"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LIWPH3EULRVLC6TMLBZYPJ5IKQGVF6C2/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3216","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42533","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46012","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42533","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46012.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500967","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42533","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500960","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56434","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500992","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-60005","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59216.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59220.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59362.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59490.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59496.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:59216","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:59220","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:59362","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:59490","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:59496","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-56434","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8563-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60005","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-56434","title":"NGINX ngx_http_ssi_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-15T14:33:46.142Z","modified":"2026-07-15T18:10:54.402Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T13:37:02.780526Z"}],"euvd":[{"id":"EUVD-2026-44684","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-15T14:33:46Z","modified":"2026-07-15T18:10:54Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:19:52.35951Z"}],"ghsa":[{"id":"GHSA-m73p-xg7q-m8f2","title":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This...","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a heap buffer over-read in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-15T15:33:07Z","modified":"2026-07-15T15:33:13Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:09:33.182129Z"}],"nvd":[{"id":"CVE-2026-56434","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-15T15:16:45.7Z","modified":"2026-08-10T15:27:56.373Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:12:29.879716Z"}],"osv":[{"id":"ALPINE-CVE-2026-56434","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-15T15:16:45.7Z","modified":"2026-10-01T02:17:49.358487517Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-56434","status":"published","published":"2026-07-18T06:04:44.613421Z","modified":"2026-09-06T07:15:25.389338185Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:24.657778Z"},{"id":"CVE-2026-56434","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-15T15:16:45.7Z","modified":"2026-10-24T10:31:06.36879651Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:11.609219Z"},{"id":"DEBIAN-CVE-2026-56434","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.  Impact: This vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-15T15:16:45.7Z","modified":"2026-10-01T03:03:19.522570496Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:57.590991Z"},{"id":"OESA-2026-3216","title":"nginx security update","description":"NGINX is a free, open-source, high-performance HTTP server and reverse proxy,  as well as an IMAP/POP3 proxy server.\r\n\r\nSecurity Fix(es):\n\nA vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map\u0026apos;s regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.\n\nImpact:\nThis vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only.\n\n\n\n\n Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-42533)\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-56434)\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX worker process, leading to limited disclosure of memory or a restart.\n\nImpact:\nThis vulnerability may allow remote, unauthenticated attackers to have limited control to disclose memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\nNote: The ngx_http_slice_module module is not enabled by default; it\u0026apos;s enabled with the --with-http_slice_module configuration parameter.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-60005)","status":"published","published":"2026-08-01T11:12:05Z","modified":"2026-08-18T01:21:26.004075507Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:46012","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-07-28T10:13:37Z","modified":"2026-10-10T10:11:21Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:59216","title":"Red Hat Security Advisory: nginx:1.24 security update","status":"published","published":"2026-08-25T10:23:19Z","modified":"2026-09-11T10:12:49Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:59220","title":"Red Hat Security Advisory: nginx security update","status":"published","published":"2026-08-25T10:23:19Z","modified":"2026-09-11T10:12:49Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:59362","title":"Red Hat Security Advisory: nginx security update","status":"published","published":"2026-08-26T10:18:08Z","modified":"2026-09-11T10:12:58Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:59490","title":"Red Hat Security Advisory: nginx:1.24 security update","status":"published","published":"2026-08-26T10:18:16Z","modified":"2026-09-11T10:13:03Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:59496","title":"Red Hat Security Advisory: nginx:1.26 security update","status":"published","published":"2026-08-26T10:18:16Z","modified":"2026-09-11T10:13:04Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RLSA-2026:59216","title":"Important: nginx:1.24 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n\n* nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-25T06:01:14.22059Z","modified":"2026-08-25T23:49:15.342348767Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:59220","title":"Important: nginx security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n\n* nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-25T12:07:46.973584Z","modified":"2026-08-25T23:49:18.192762213Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:59362","title":"Important: nginx security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n\n* nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-26T12:04:51.199716Z","modified":"2026-08-26T12:30:04.28303643Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:59490","title":"Important: nginx:1.24 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n\n* nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-25T18:04:05.699051Z","modified":"2026-08-26T00:16:52.857635882Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:59496","title":"Important: nginx:1.26 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n\n* nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-26T00:04:43.459433Z","modified":"2026-08-26T00:30:03.360162948Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-56434","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process. Impact: This vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-16T00:00:00Z","modified":"2026-11-05T19:04:22.956180777Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"},{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-05T19:27:19.775682Z"},{"id":"ALSA-2026:59216","title":"Important: nginx:1.24 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n  * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-10-29T11:02:25.005167885Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:59220","title":"Important: nginx security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n  * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-10-29T11:30:46.783026196Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:59362","title":"Important: nginx security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n  * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-25T00:00:00Z","modified":"2026-10-29T11:32:36.530574591Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:59490","title":"Important: nginx:1.24 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n  * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-25T00:00:00Z","modified":"2026-10-29T11:30:11.187369903Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:59496","title":"Important: nginx:1.26 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)\n  * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-25T00:00:00Z","modified":"2026-10-29T11:32:07.280446647Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-92496","title":"CVE-2026-56434 affecting package nginx for versions less than 1.28.3-8","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-15T15:16:45Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.880689Z"},{"id":"BIT-nginx-2026-56434","title":"NGINX ngx_http_ssi_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-20T20:45:44.211Z","modified":"2026-09-08T08:48:16.796445241Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"BIT-nginx-gateway-2026-56434","title":"NGINX ngx_http_ssi_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX worker process.\n\nImpact:\nThis vulnerability may allow remote attackers to have limited control to modify memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data plane issue only.\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-07-20T20:45:47.344Z","modified":"2026-09-08T08:48:16.899009409Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"CLSA-2026-1787916225","title":"nginx: Fix of CVE-2026-56434","description":"- CVE-2026-56434: fix use-after-free in ngx_http_ssi_filter_module from\n  duplicate subrequest finalization; ngx_http_post_request() now skips\n  posting a request that is already queued, and ngx_http_finalize_request()\n  resets r-\u003ewrite_event_handler to a no-op handler during active subrequest\n  finalization","status":"published","published":"2026-08-28T11:23:56Z","modified":"2026-10-26T09:30:37.239766572Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788337827","title":"nginx: Fix of CVE-2026-56434","description":"- CVE-2026-56434: avoid duplicate subrequest finalization to prevent a\n  use-after-free in the SSI filter during unbuffered proxying","status":"published","published":"2026-09-02T08:30:38Z","modified":"2026-10-26T09:31:51.624299273Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788338106","title":"nginx: Fix of CVE-2026-56434","description":"- CVE-2026-56434: avoid duplicate subrequest finalization to prevent a\n  use-after-free in the SSI filter during unbuffered proxying","status":"published","published":"2026-09-02T08:35:16Z","modified":"2026-10-26T09:31:38.511805816Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788365549","title":"nginx: Fix of 2 CVEs","description":"- CVE-2026-56434: fix use-after-free from duplicate subrequest finalization;\n  ngx_http_post_request() now skips a request that is already posted, and\n  ngx_http_finalize_request() resets r-\u003ewrite_event_handler to a no-op\n  handler during active subrequest finalization\n- CVE-2026-60005: fix uninitialized memory read via stale regex captures in\n  slice/background-update subrequests; ngx_http_regex_exec() now resets\n  r-\u003encaptures when reallocating the captures array after a failed match","status":"published","published":"2026-09-02T16:12:42Z","modified":"2026-10-26T09:31:19.202052719Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1792487559","title":"Fix CVE(s): CVE-2026-15176, CVE-2026-56434","description":"   * SECURITY UPDATE: heap buffer overflow when mapping a rewritten URI to a\n     path in a location using alias\n     - debian/patches/CVE-2026-15176.patch: reject URI to path mapping in\n       ngx_http_map_uri_to_path() when r-\u003euri_changed is set, so a rewrite\n       that shortens the URI below the alias location prefix can no longer\n       overflow the path buffer through $request_filename\n     - CVE-2026-15176\n   * SECURITY UPDATE: use-after-free via duplicate subrequest finalization\n     - debian/patches/CVE-2026-56434.patch: skip posting a request in\n       ngx_http_post_request() if it is already posted, and reset the\n       subrequest write event handler during finalization in\n       ngx_http_finalize_request(), so an SSI subrequest double-posted during\n       unbuffered proxying can no longer be finalized twice\n     - CVE-2026-56434","status":"published","published":"2026-10-20T09:12:52Z","modified":"2026-10-26T09:32:05.641055816Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"CLSA-2026-1792768371","title":"nginx: Fix of CVE-2026-56434","description":"- CVE-2026-56434: fix use-after-free in ngx_http_ssi_module by skipping a\n  subrequest post when the request is already posted and resetting\n  r-\u003ewrite_event_handler during subrequest finalization","status":"published","published":"2026-10-23T15:13:02Z","modified":"2026-10-26T09:31:57.380455174Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792768506","title":"nginx: Fix of CVE-2026-56434","description":"- CVE-2026-56434: fix use-after-free in ngx_http_ssi_module by skipping a\n  subrequest post when the request is already posted and resetting\n  r-\u003ewrite_event_handler during subrequest finalization","status":"published","published":"2026-10-23T15:15:17Z","modified":"2026-10-26T09:32:01.508125352Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"MGASA-2026-0301","title":"Updated nginx packages fix security vulnerabilities","description":"CVE-2026-42533:\nHeap buffer overflow might occur in a worker process when using the map\ndirective with regex matching if the map variable was included in a\nstring expression after a capture affected by this map; a similar issue\nmight happen when using a non-cacheable variable in a\nstring expression.\nThanks to Mufeed VH of Winfunc Research and Maxim Dounin.\n.\nCVE-2026-60005:\nUninitialized memory access might occur when using unnamed regex\ncaptures with the \"slice\" directive or background cache update, which\ncould result in worker process memory disclosure or worker process\ntermination.\n.\nCVE-2026-56434:\nUse-after-free might occur when processing a specially crafted proxied\nbackend response with the ngx_http_ssi_filter_module.\nThanks to P4P3R-HAK.\n","status":"published","published":"2026-07-27T22:45:13Z","modified":"2026-07-27T23:00:05.899586278Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11295-1","title":"nginx-1.31.3-1.1 on GA media","description":"These are all security issues fixed in the nginx-1.31.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-17T00:00:00Z","modified":"2026-07-18T08:45:05.905564841Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"ROOT-OS-ALPINE-315-CVE-2026-56434","title":"CVE-2026-56434 in nginx - Patched by Root","description":"Root has patched CVE-2026-56434 in the nginx package for Root:Alpine:3.15. Multiple fixed versions available.","status":"published","published":"2026-11-02T10:27:11Z","modified":"2026-11-02T11:15:02.802966152Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2026-56434","title":"CVE-2026-56434 in nginx - Patched by Root","description":"Root has patched CVE-2026-56434 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2026-11-05T10:39:48Z","modified":"2026-11-05T11:15:04.168065904Z","updated_at":"2026-11-05T13:30:49.23793Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-56434","title":"CVE-2026-56434 in nginx - Patched by Root","description":"Root has patched CVE-2026-56434 in the nginx package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-10T10:29:49Z","modified":"2026-09-10T11:15:08.170390891Z","updated_at":"2026-11-02T15:53:30.44348Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-56434","title":"CVE-2026-56434 in nginx - Patched by Root","description":"Root has patched CVE-2026-56434 in the nginx package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-25T12:12:38Z","modified":"2026-10-09T13:00:14.062580492Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-56434","title":"CVE-2026-56434 in nginx - Patched by Root","description":"Root has patched CVE-2026-56434 in the nginx package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-24T16:18:59Z","modified":"2026-10-09T13:00:17.289153258Z","updated_at":"2026-11-02T15:53:33.681527Z"}]}}