{"id":"CVE-2026-9256","aliases":["ALPINE-CVE-2026-9256","ALSA-2026:28212","ALSA-2026:28921","ALSA-2026:28973","ALSA-2026:29151","ALSA-2026:29874","AZL-88116","BELL-CVE-2026-9256","BIT-nginx-2026-9256","BIT-nginx-gateway-2026-9256","CLSA-2026-1779712300","CLSA-2026-1779712426","CLSA-2026-1779736259","CLSA-2026-1779737077","CLSA-2026-1779788634","CLSA-2026-1779788913","CLSA-2026-1779789531","CLSA-2026-1779789551","CLSA-2026-1779789825","CLSA-2026-1779790011","CLSA-2026-1779790051","CLSA-2026-1779804603","CLSA-2026-1779992757","CLSA-2026-1780065226","DEBIAN-CVE-2026-9256","EUVD-2026-31444","GHSA-h78r-86c6-jgp4","MGASA-2026-0159","OESA-2026-2587","RHSA-2026:20351","RHSA-2026:28212","RHSA-2026:28921","RHSA-2026:28973","RHSA-2026:29151","RHSA-2026:29874","RLSA-2026:28212","RLSA-2026:28921","RLSA-2026:29151","RLSA-2026:29874","ROOT-OS-DEBIAN-11-CVE-2026-9256","SUSE-SU-2026:22178-1","SUSE-SU-2026:2307-1","SUSE-SU-2026:2370-1","UBUNTU-CVE-2026-9256","openSUSE-SU-2026:10852-1","openSUSE-SU-2026:21107-1"],"status":"published","title":"NGINX ngx_http_rewrite_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","severity":{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.10856,"percentile":0.9589,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-122"],"published":"2026-05-22T14:11:41Z","modified":"2026-10-29T11:32:34Z","exploits":[{"source":"pocgithub","id":"suominen/CVE-2026-9256","title":"suominen/CVE-2026-9256","date":"2026-05-24","url":"https://github.com/suominen/CVE-2026-9256"},{"source":"pocgithub","id":"3nou9h/CVE-2026-9256-Poc","title":"3nou9h/CVE-2026-9256-Poc","date":"2026-05-28","url":"https://github.com/3nou9h/CVE-2026-9256-Poc"},{"source":"pocgithub","id":"W5M1n9/NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256","title":"W5M1n9/NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256","date":"2026-05-28","url":"https://github.com/W5M1n9/NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256"},{"source":"pocgithub","id":"06-ux/CVE-2026-9256-POC","title":"06-ux/CVE-2026-9256-POC","date":"2026-06-03","url":"https://github.com/06-ux/CVE-2026-9256-POC"}],"fixes":[{"ecosystem":"Alpine:v3.21","package":"nginx","fixed_in":["1.26.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nginx","fixed_in":["1.28.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nginx","fixed_in":["1.28.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nginx","fixed_in":["1.30.2-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-all-modules","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-core","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-filesystem","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","fixed_in":["1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1","2:1.20.1-28.el9_8.3.alma.1","2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx","fixed_in":["1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-all-modules","fixed_in":["1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-filesystem","fixed_in":["1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-devel","fixed_in":["1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-http-image-filter","fixed_in":["1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-http-perl","fixed_in":["1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-mail","fixed_in":["1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nginx-mod-stream","fixed_in":["1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-all-modules","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-core","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-filesystem","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-devel","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-http-image-filter","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-http-perl","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-http-xslt-filter","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-mail","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"nginx-mod-stream","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"nginx","fixed_in":["1.28.3-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"nginx","fixed_in":["1.22.1-r6"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"nginx","fixed_in":["1.28.3-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"nginx","fixed_in":["1.30.2-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"nginx","fixed_in":["1.24.0","1.30.2","1.31.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"nginx-gateway","fixed_in":["2.2.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-auth-pam","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-cache-purge","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-dav-ext","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-echo","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-fancyindex","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip2","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-headers-more-filter","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-image-filter","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-lua","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-ndk","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-perl","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-subs-filter","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-uploadprogress","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-upstream-fair","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-xslt-filter","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-mail","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-nchan","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-rtmp","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-stream","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-common","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-core","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-doc","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-extras","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-full","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-light","fixed_in":["1.18.0-0ubuntu1.7+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-all-modules","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-core","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-filesystem","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-devel","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-image-filter","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-perl","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-mail","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-stream","fixed_in":["1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nginx","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nginx-all-modules","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nginx-filesystem","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-devel","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-http-image-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-http-perl","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-mail","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-stream","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nginx","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nginx-all-modules","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nginx-filesystem","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-geoip","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-image-filter","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-perl","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-xslt-filter","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-mail","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-stream","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx","fixed_in":["1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-all-modules","fixed_in":["1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-filesystem","fixed_in":["1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-image-filter","fixed_in":["1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-perl","fixed_in":["1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-mail","fixed_in":["1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-stream","fixed_in":["1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-auth-pam","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-cache-purge","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-dav-ext","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-echo","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-fancyindex","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-geoip","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-headers-more-filter","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-image-filter","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-lua","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-ndk","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-perl","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-subs-filter","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-uploadprogress","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-upstream-fair","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-xslt-filter","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-mail","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-nchan","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-rtmp","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-stream","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-common","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-core","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-doc","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-extras","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-full","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-light","fixed_in":["1.14.0-0ubuntu1.11+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx","fixed_in":["1.10.3-0ubuntu0.16.04.8+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-common","fixed_in":["1.10.3-0ubuntu0.16.04.8+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-core","fixed_in":["1.10.3-0ubuntu0.16.04.8+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-doc","fixed_in":["1.10.3-0ubuntu0.16.04.8+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-extras","fixed_in":["1.10.3-0ubuntu0.16.04.8+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-full","fixed_in":["1.10.3-0ubuntu0.16.04.8+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-light","fixed_in":["1.10.3-0ubuntu0.16.04.8+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx","fixed_in":["1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-all-modules","fixed_in":["1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-filesystem","fixed_in":["1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-image-filter","fixed_in":["1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-perl","fixed_in":["1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-mail","fixed_in":["1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-stream","fixed_in":["1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx","fixed_in":["1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-all-modules","fixed_in":["1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-filesystem","fixed_in":["1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-image-filter","fixed_in":["1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-perl","fixed_in":["1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-mail","fixed_in":["1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-stream","fixed_in":["1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-all-modules","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-core","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-filesystem","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-devel","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-image-filter","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-perl","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-xslt-filter","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-mail","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-stream","fixed_in":["2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"nginx","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"nginx-all-modules","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"nginx-filesystem","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-geoip","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-image-filter","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-perl","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-xslt-filter","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-mail","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-stream","fixed_in":["1.10.3-4.el6.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-auth-pam","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-cache-purge","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-dav-ext","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-echo","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-fancyindex","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-geoip","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-headers-more-filter","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-image-filter","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-lua","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-ndk","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-perl","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-subs-filter","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-uploadprogress","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-upstream-fair","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-xslt-filter","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-mail","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-nchan","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-rtmp","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-stream","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-common","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-doc","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-extras","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-full","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"nginx-light","fixed_in":["1.14.2-2+deb10u5+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-all-modules","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-filesystem","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-devel","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-image-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-perl","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-mail","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-stream","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-all-modules","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-filesystem","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-devel","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-image-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-perl","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-mail","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-stream","fixed_in":["1:1.20.1-10.el7.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nginx","fixed_in":["1.22.1-9+deb12u8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nginx","fixed_in":["1.26.3-3+deb13u6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nginx","fixed_in":["1.30.1-3"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"nginx","fixed_in":["1.30.2-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"nginx","fixed_in":["1.21.5-15.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"nginx","fixed_in":["compat-1.24.0-11.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"nginx","fixed_in":["1.24.0-11.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"nginx","fixed_in":["1.21.5-13.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-devel","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","fixed_in":["1:1.24.0-7.module+el9.8.0+24379+0344c460.2","2:1.20.1-28.el9_8.3","2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-all-modules","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debugsource","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-filesystem","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-devel","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream-debuginfo","fixed_in":["1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-core-debuginfo","fixed_in":["2:1.20.1-28.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debuginfo","fixed_in":["2:1.20.1-28.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debugsource","fixed_in":["2:1.20.1-28.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-devel","fixed_in":["2:1.20.1-28.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-image-filter-debuginfo","fixed_in":["2:1.20.1-28.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-perl-debuginfo","fixed_in":["2:1.20.1-28.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-xslt-filter-debuginfo","fixed_in":["2:1.20.1-28.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-mail-debuginfo","fixed_in":["2:1.20.1-28.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-stream-debuginfo","fixed_in":["2:1.20.1-28.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-all-modules","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core-debuginfo","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debuginfo","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debugsource","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-filesystem","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter-debuginfo","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl-debuginfo","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter-debuginfo","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail-debuginfo","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream-debuginfo","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-devel","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"nginx","fixed_in":["1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1","2:1.26.3-9.module+el9.8.0+40194+40adfc1b"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"nginx","fixed_in":["1:1.24.0-3.module+el8.10.0+40187+52bedf24.1","1:1.24.0-3.module+el8.10.0+40144+38158758"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"nginx","fixed_in":["2:1.26.3-6.el10_2.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"nginx","fixed_in":["1.27.2-160000.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"nginx","fixed_in":["1.27.2-160000.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"nginx","fixed_in":["1.21.5-150600.10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"nginx","fixed_in":["1.21.5-150600.10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"nginx","fixed_in":["1.21.5-150600.10.21.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nginx","fixed_in":["1.4.6-1ubuntu3.9+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nginx","fixed_in":["1.10.3-0ubuntu0.16.04.5+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nginx","fixed_in":["1.14.0-0ubuntu1.11+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"nginx","fixed_in":["1.18.0-0ubuntu1.7+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nginx","fixed_in":["1.18.0-6ubuntu14.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"nginx","fixed_in":["1.24.0-2ubuntu7.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"nginx","fixed_in":["1.28.0-6ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"nginx","fixed_in":["1.28.3-2ubuntu1.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"nginx","fixed_in":["1.31.1-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"nginx","fixed_in":["1.27.2-160000.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.2-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module_el9.8.0+260+95b8e5ed.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.22.1-r0"},{"fixed":"1.22.1-r6"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.28.0-r3"},{"fixed":"1.28.3-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.22.1-r0"},{"fixed":"1.30.2-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"nginx","ranges":[{"type":"SEMVER","events":[{"introduced":"0.1.17"},{"fixed":"1.24.0"},{"introduced":"1.30.0"},{"fixed":"1.30.2"},{"introduced":"1.31.0"},{"fixed":"1.31.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"nginx-gateway","ranges":[{"type":"SEMVER","events":[{"introduced":"0.1.17"},{"fixed":"2.2.1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-auth-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-cache-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-dav-ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-echo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-fancyindex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-geoip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-headers-more-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-ndk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-subs-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-uploadprogress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-upstream-fair","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-nchan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-rtmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-full","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"nginx-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.4.0+2408+1d12a932.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-auth-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-cache-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-dav-ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-echo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-fancyindex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-headers-more-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-ndk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-subs-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-uploadprogress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-upstream-fair","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-nchan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-rtmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-full","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"nginx-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.8+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.8+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.8+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.8+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.8+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-full","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.8+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"nginx-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.8+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8.5.0+2409+03996a02.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.1-9.module_el8+2410+0ab8d745.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-22.el9_6.3.alma.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-4.el6.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-auth-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-cache-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-dav-ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-echo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-fancyindex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-headers-more-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-lua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-ndk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-subs-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-uploadprogress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-upstream-fair","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-nchan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-rtmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-full","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"nginx-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-2+deb10u5+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.20.1-10.el7.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.1-9+deb12u8"}]}],"versions":["1.22.1-9","1.22.1-9+deb12u1","1.22.1-9+deb12u2","1.22.1-9+deb12u3","1.22.1-9+deb12u4","1.22.1-9+deb12u5","1.22.1-9+deb12u6","1.22.1-9+deb12u7"]},{"source":"osv","ecosystem":"Debian:13","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-3+deb13u6"}]}],"versions":["1.26.3-3","1.26.3-3+deb13u1","1.26.3-3+deb13u2","1.26.3-3+deb13u3","1.26.3-3+deb13u4","1.26.3-3+deb13u5"]},{"source":"osv","ecosystem":"Debian:14","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.1-3"}]}],"versions":["1.26.3-3","1.28.0-1","1.28.0-2","1.28.0-3","1.28.0-4","1.28.0-5","1.28.0-6","1.28.1-1","1.28.1-2","1.28.1-3","1.28.2-1","1.28.2-2","1.28.2-3","1.28.2-4","1.28.3-1","1.28.3-2","1.30.0-1","1.30.0-2","1.30.0-3","1.30.0-4","1.30.1-1","1.30.1-2"]},{"source":"osv","ecosystem":"Mageia:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.2-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-15.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"compat-1.24.0-11.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-11.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-13.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"nginx-mod-stream-geoip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+24379+0344c460.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+24380+8b0811ed.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.1-28.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+24374+c0e15309.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-all-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-image-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-http-xslt-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-mail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-stream-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"nginx-mod-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40187+52bedf24.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.0-3.module+el8.10.0+40144+38158758"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-9.module+el9.8.0+40194+40adfc1b"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.26.3-6.el10_2.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.2-160000.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.2-160000.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150600.10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150600.10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150600.10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-150400.3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-1ubuntu3.9+esm6"}]}],"versions":["1.4.1-3ubuntu1","1.4.3-2ubuntu1","1.4.4-1ubuntu1","1.4.4-2ubuntu1","1.4.4-4ubuntu1","1.4.5-1ubuntu1","1.4.6-1ubuntu2","1.4.6-1ubuntu3","1.4.6-1ubuntu3.1","1.4.6-1ubuntu3.2","1.4.6-1ubuntu3.3","1.4.6-1ubuntu3.4","1.4.6-1ubuntu3.5","1.4.6-1ubuntu3.6","1.4.6-1ubuntu3.7","1.4.6-1ubuntu3.8","1.4.6-1ubuntu3.9","1.4.6-1ubuntu3.9+esm1","1.4.6-1ubuntu3.9+esm2","1.4.6-1ubuntu3.9+esm3","1.4.6-1ubuntu3.9+esm4","1.4.6-1ubuntu3.9+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-0ubuntu0.16.04.5+esm7"}]}],"versions":["1.9.3-1ubuntu1","1.9.6-2ubuntu1","1.9.6-2ubuntu2","1.9.9-0ubuntu1","1.9.9-1ubuntu1","1.9.10-0ubuntu1","1.9.10-1ubuntu1","1.9.11-0ubuntu1","1.9.11-0ubuntu2","1.9.12-0ubuntu1","1.9.13-0ubuntu1","1.9.14-0ubuntu1","1.9.15-0ubuntu1","1.10.0-0ubuntu0.16.04.1","1.10.0-0ubuntu0.16.04.2","1.10.0-0ubuntu0.16.04.3","1.10.0-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.1","1.10.3-0ubuntu0.16.04.2","1.10.3-0ubuntu0.16.04.3","1.10.3-0ubuntu0.16.04.4","1.10.3-0ubuntu0.16.04.5","1.10.3-0ubuntu0.16.04.5+esm1","1.10.3-0ubuntu0.16.04.5+esm2","1.10.3-0ubuntu0.16.04.5+esm3","1.10.3-0ubuntu0.16.04.5+esm4","1.10.3-0ubuntu0.16.04.5+esm5","1.10.3-0ubuntu0.16.04.5+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-0ubuntu1.11+esm2"}]}],"versions":["1.12.1-0ubuntu2","1.13.6-2ubuntu1","1.13.6-2ubuntu2","1.13.10-1ubuntu1","1.13.12-0ubuntu1","1.14.0-0ubuntu1","1.14.0-0ubuntu1.1","1.14.0-0ubuntu1.2","1.14.0-0ubuntu1.3","1.14.0-0ubuntu1.4","1.14.0-0ubuntu1.5","1.14.0-0ubuntu1.6","1.14.0-0ubuntu1.7","1.14.0-0ubuntu1.9","1.14.0-0ubuntu1.10","1.14.0-0ubuntu1.11","1.14.0-0ubuntu1.11+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-0ubuntu1.7+esm1"}]}],"versions":["1.16.1-0ubuntu2","1.16.1-0ubuntu3","1.17.5-0ubuntu1","1.17.6-0ubuntu1","1.17.7-0ubuntu1","1.17.8-0ubuntu1","1.17.8-0ubuntu2","1.17.8-0ubuntu3","1.17.9-0ubuntu1","1.17.9-0ubuntu2","1.17.9-0ubuntu3","1.17.10-0ubuntu1","1.18.0-0ubuntu1","1.18.0-0ubuntu1.2","1.18.0-0ubuntu1.3","1.18.0-0ubuntu1.4","1.18.0-0ubuntu1.5","1.18.0-0ubuntu1.6","1.18.0-0ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-6ubuntu14.12"}]}],"versions":["1.18.0-6ubuntu11","1.18.0-6ubuntu12","1.18.0-6ubuntu14","1.18.0-6ubuntu14.1","1.18.0-6ubuntu14.2","1.18.0-6ubuntu14.3","1.18.0-6ubuntu14.4","1.18.0-6ubuntu14.5","1.18.0-6ubuntu14.6","1.18.0-6ubuntu14.7","1.18.0-6ubuntu14.8","1.18.0-6ubuntu14.10","1.18.0-6ubuntu14.11"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-2ubuntu7.9"}]}],"versions":["1.24.0-1ubuntu1","1.24.0-2ubuntu1","1.24.0-2ubuntu2","1.24.0-2ubuntu3","1.24.0-2ubuntu4","1.24.0-2ubuntu6","1.24.0-2ubuntu7","1.24.0-2ubuntu7.1","1.24.0-2ubuntu7.3","1.24.0-2ubuntu7.4","1.24.0-2ubuntu7.5","1.24.0-2ubuntu7.6","1.24.0-2ubuntu7.7","1.24.0-2ubuntu7.8"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.0-6ubuntu1.4"}]}],"versions":["1.26.3-2ubuntu1","1.26.3-3ubuntu1","1.26.3-3ubuntu2","1.26.3-3ubuntu3","1.28.0-3ubuntu1","1.28.0-4ubuntu1","1.28.0-6ubuntu1","1.28.0-6ubuntu1.1","1.28.0-6ubuntu1.2","1.28.0-6ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.3-2ubuntu1.2"}]}],"versions":["1.28.0-6ubuntu1","1.28.1-2ubuntu1","1.28.1-3ubuntu1","1.28.2-2ubuntu1","1.28.3-2ubuntu1","1.28.3-2ubuntu1.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.1-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"nginx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.2-160000.5.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"f5","product":"dos"},{"vendor":"f5","product":"nginx open source"},{"vendor":"f5","product":"nginx plus"},{"vendor":"f5","product":"nginx_gateway_fabric"},{"vendor":"f5","product":"nginx_ingress_controller"},{"vendor":"f5","product":"nginx_instance_manager"},{"vendor":"f5","product":"nginx_open_source"},{"vendor":"f5","product":"nginx_plus"},{"vendor":"f5","product":"waf"},{"vendor":"red hat","product":"red hat discovery 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat lightspeed proxy 1"},{"vendor":"red hat","product":"red hat update infrastructure 5"},{"vendor":"redhat","product":"discovery"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"hardened_images"},{"vendor":"redhat","product":"update_infrastructure"}],"references":[{"url":"https://my.f5.com/manage/s/article/K000161377","tags":["vendor-advisory","Mitigation","Vendor Advisory","advisory","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/22/14","tags":["Mailing List","discussion","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/06/msg00023.html","tags":["Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-9256","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480746","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9256.json","tags":["x_sadp-csaf-vex","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29874","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28921","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28212","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28973","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29151","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:33313","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20351","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:44481","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9256","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-h78r-86c6-jgp4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-9256","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2480746","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-28212.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-28921.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-28973.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-29151.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-29874.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-9256","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1779712300.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779712426.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1779736259.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1779737077.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1779788634.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1779788913.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1779789531.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1779789551.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1779789825.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779790011.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1779790051.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1779804603.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1779992757.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1780065226.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-9256","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0159.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35581","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/22/14","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2587","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40460","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42926","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42530","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20351.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-9256","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477113","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40460","tags":["advisory"]},{"url":"https://my.f5.com/manage/s/article/K000161068","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2489872","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42530","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42530","tags":["advisory"]},{"url":"https://my.f5.com/manage/s/article/K000161616","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477068","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42926","tags":["advisory"]},{"url":"https://my.f5.com/manage/s/article/K000161131","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28212.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28921.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28973.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29151.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29874.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:28212","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:28921","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:29151","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:29874","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622178-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1266215","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9256","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262307-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262370-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1260415","tags":["report"]},{"url":"https://bugzilla.suse.com/1260420","tags":["report"]},{"url":"https://bugzilla.suse.com/1265229","tags":["report"]},{"url":"https://bugzilla.suse.com/1265231","tags":["report"]},{"url":"https://bugzilla.suse.com/1265232","tags":["report"]},{"url":"https://bugzilla.suse.com/1265233","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42946","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-9256","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8354-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8375-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-9256","title":"NGINX ngx_http_rewrite_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-05-22T14:11:41.877Z","modified":"2026-08-25T12:05:55.163Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-122","CWE-122"],"updated_at":"2026-11-02T13:42:26.790871Z"}],"euvd":[{"id":"EUVD-2026-31444","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-05-22T14:11:41Z","modified":"2026-08-25T12:05:55Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T18:01:33.385611Z"}],"ghsa":[{"id":"GHSA-h78r-86c6-jgp4","title":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This...","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-05-26T13:30:17Z","modified":"2026-08-25T15:33:36Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:10:57.434403Z"}],"nvd":[{"id":"CVE-2026-9256","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-05-22T15:16:27.073Z","modified":"2026-08-25T13:19:33.4Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:12:20.131508Z"}],"osv":[{"id":"ALPINE-CVE-2026-9256","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-05-22T15:16:27.073Z","modified":"2026-10-01T02:17:49.42087463Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BELL-CVE-2026-9256","status":"published","published":"2026-05-26T07:17:43.47147Z","modified":"2026-06-05T07:15:04.808678022Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:27.164451Z"},{"id":"CVE-2026-9256","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-05-22T15:16:27.073Z","modified":"2026-10-24T10:30:38.907439224Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:45:20.588039Z"},{"id":"DEBIAN-CVE-2026-9256","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.    Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-05-22T15:16:27.073Z","modified":"2026-10-01T03:03:55.743877565Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:46:06.846102Z"},{"id":"OESA-2026-2587","title":"nginx security update","description":"NGINX is a free, open-source, high-performance HTTP server and reverse proxy,  as well as an IMAP/POP3 proxy server.\r\n\r\nSecurity Fix(es):\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.(CVE-2026-9256)","status":"published","published":"2026-06-05T11:11:31Z","modified":"2026-08-18T01:20:03.259923005Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"RHSA-2026:20351","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-26T10:07:21Z","modified":"2026-10-17T10:10:38Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:28212","title":"Red Hat Security Advisory: nginx:1.24 security update","status":"published","published":"2026-06-24T10:08:29Z","modified":"2026-07-26T10:10:14Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28921","title":"Red Hat Security Advisory: nginx:1.24 security update","status":"published","published":"2026-06-25T10:43:00Z","modified":"2026-07-26T10:10:19Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28973","title":"Red Hat Security Advisory: nginx security update","status":"published","published":"2026-06-25T10:43:02Z","modified":"2026-07-26T10:10:20Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:29151","title":"Red Hat Security Advisory: nginx:1.26 security update","status":"published","published":"2026-06-25T10:43:08Z","modified":"2026-07-26T10:10:24Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:29874","title":"Red Hat Security Advisory: nginx security update","status":"published","published":"2026-06-26T11:46:32Z","modified":"2026-07-26T10:10:29Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RLSA-2026:28212","title":"Important: nginx:1.24 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-24T06:03:14.237933Z","modified":"2026-06-24T06:30:04.755766215Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:28921","title":"Important: nginx:1.24 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-24T12:01:04.194583Z","modified":"2026-06-24T12:30:04.038534813Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:29151","title":"Important: nginx:1.26 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-25T12:03:37.665962Z","modified":"2026-06-25T12:30:04.224460265Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:29874","title":"Important: nginx security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-26T12:05:00.179765Z","modified":"2026-06-26T12:16:30.762929331Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-9256","title":"CVE-2026-9256 in rootio-nginx - Patched by Root","description":"Root has patched CVE-2026-9256 in the rootio-nginx package for Root:Debian:11. Multiple fixed versions available.","status":"withdrawn","published":"2026-06-15T05:27:37Z","modified":"2026-07-28T14:00:18.899163798Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:30.44348Z"},{"id":"UBUNTU-CVE-2026-9256","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-05-22T15:16:00Z","modified":"2026-06-30T18:18:17.651564616Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T16:57:40.980117Z"},{"id":"ALSA-2026:28212","title":"Important: nginx:1.24 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-23T00:00:00Z","modified":"2026-10-29T11:32:34.775344264Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:28921","title":"Important: nginx:1.24 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-24T00:00:00Z","modified":"2026-10-29T11:02:26.321855833Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:28973","title":"Important: nginx security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-24T00:00:00Z","modified":"2026-10-29T11:32:34.879041976Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:29151","title":"Important: nginx:1.26 security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-24T00:00:00Z","modified":"2026-10-29T11:32:34.56661247Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:29874","title":"Important: nginx security update","description":"nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   \n\nSecurity Fix(es):  \n\n  * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-25T00:00:00Z","modified":"2026-10-29T11:30:19.767378956Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-88116","title":"CVE-2026-9256 affecting package nginx for versions less than 1.28.3-4","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-05-22T15:16:27Z","modified":"2026-09-22T05:34:53Z","updated_at":"2026-11-02T15:28:11.069402Z"},{"id":"BIT-nginx-2026-9256","title":"NGINX ngx_http_rewrite_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-01T11:47:00.396Z","modified":"2026-09-08T08:48:16.818997819Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"BIT-nginx-gateway-2026-9256","title":"NGINX ngx_http_rewrite_module vulnerability","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","status":"published","published":"2026-06-01T11:47:02.728Z","modified":"2026-09-08T08:48:16.770230767Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"CLSA-2026-1779712300","title":"Fix CVE(s): CVE-2026-9256","description":"   * SECURITY UPDATE: heap buffer overflow in ngx_http_rewrite_module with\n     overlapping captures\n     - debian/patches/CVE-2026-9256.patch: fix heap buffer overflow in\n       ngx_http_script_regex_start_code() when a rewrite replacement string\n       with no variables has overlapping captures, by moving the per-capture\n       length accumulation and ngx_escape_uri() call inside a single loop\n       over the actual captures buffer.\n     - CVE-2026-9256","status":"published","published":"2026-05-25T12:31:45Z","modified":"2026-06-04T10:04:05.683088Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779712426","title":"nginx: Fix of CVE-2026-9256","description":"- CVE-2026-9256: heap buffer overflow in ngx_http_script_regex_start_code()\n  when a rewrite replacement contains overlapping captures with the redirect\n  parameter or argument string; the per-capture length accumulation is\n  refactored to also account for escape-uri expansion per capture region,\n  preventing under-allocation of the rewrite output buffer","status":"published","published":"2026-05-25T12:33:51Z","modified":"2026-10-26T09:30:02.914057884Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779736259","title":"nginx: Fix of CVE-2026-9256","description":"- CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures","status":"published","published":"2026-05-28T14:22:58Z","modified":"2026-10-26T09:31:41.668595749Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779737077","title":"nginx: Fix of CVE-2026-9256","description":"- CVE-2026-9256: fix heap buffer overflow with overlapping captures in\n  ngx_http_rewrite_module","status":"published","published":"2026-05-26T09:21:52Z","modified":"2026-10-26T09:31:39.370818467Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779788634","title":"nginx: Fix of CVE-2026-9256","description":"- CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures","status":"published","published":"2026-05-26T09:43:58Z","modified":"2026-10-26T09:31:49.713550312Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779788913","title":"Fix CVE(s): CVE-2026-9256","description":"   * SECURITY UPDATE: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures\n     - debian/patches/CVE-2026-9256.patch: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures\n     - CVE-2026-9256","status":"published","published":"2026-05-26T09:48:37Z","modified":"2026-06-04T10:04:17.623533Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779789531","title":"Fix CVE(s): CVE-2026-9256","description":"   * SECURITY UPDATE: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures\n     - debian/patches/CVE-2026-9256.patch: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures\n     - CVE-2026-9256","status":"published","published":"2026-05-26T09:58:55Z","modified":"2026-06-04T10:04:05.44085Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779789551","title":"nginx: Fix of CVE-2026-9256","description":"- CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures","status":"published","published":"2026-05-26T09:59:17Z","modified":"2026-10-26T09:31:44.615167439Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779789825","title":"nginx: Fix of CVE-2026-9256","description":"- CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures","status":"published","published":"2026-05-26T10:03:49Z","modified":"2026-10-26T09:31:37.549512183Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779790011","title":"nginx: Fix of CVE-2026-9256","description":"- CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures","status":"published","published":"2026-05-26T10:06:55Z","modified":"2026-10-26T09:31:06.756233868Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779790051","title":"nginx: Fix of CVE-2026-9256","description":"- CVE-2026-9256: fix heap buffer overflow with overlapping captures in\n  ngx_http_rewrite_module","status":"published","published":"2026-05-26T10:07:35Z","modified":"2026-10-26T09:31:46.16068331Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779804603","title":"Fix CVE(s): CVE-2026-9256","description":"   * SECURITY UPDATE: Heap buffer overflow in ngx_http_rewrite_module via\n     overlapping PCRE captures in replacement strings\n     - debian/patches/CVE-2026-9256.patch: recompute buffer length per\n       capture (including escaping) in ngx_http_script_regex_start_code\n       to prevent buffer overrun when redirect parameter is used or\n       arguments appear in the rewrite replacement string\n     - CVE-2026-9256","status":"published","published":"2026-05-26T14:10:17Z","modified":"2026-06-04T10:04:16.767903Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779992757","title":"nginx: Fix of 2 CVEs","description":"- CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures","status":"published","published":"2026-06-26T08:40:59Z","modified":"2026-10-26T09:31:57.614267003Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1780065226","title":"nginx: Fix of 2 CVEs","description":"- CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures","status":"published","published":"2026-06-26T08:37:46Z","modified":"2026-10-26T09:31:53.775161205Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"MGASA-2026-0159","title":"Updated nginx package fixes a security vulnerability","description":"The updated package fixes a security vulnerability:\nNGINX ngx_http_rewrite_module vulnerability. (CVE-2026-9256)\n","status":"published","published":"2026-05-29T05:12:50Z","modified":"2026-05-29T05:15:06.863350157Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10852-1","title":"nginx-1.31.1-1.1 on GA media","description":"These are all security issues fixed in the nginx-1.31.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-24T00:00:00Z","modified":"2026-05-25T07:45:05.557366126Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21107-1","title":"Security update for nginx","description":"This update for nginx fixes the following issue\n\n- CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping\n  captures (bsc#1266215).\n","status":"published","published":"2026-06-19T16:53:14Z","modified":"2026-06-30T18:24:41.682672027Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22178-1","title":"Security update for nginx","description":"This update for nginx fixes the following issue\n\n- CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping\n  captures (bsc#1266215).\n","status":"published","published":"2026-06-19T16:53:52Z","modified":"2026-06-24T18:24:19.26321443Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2307-1","title":"Security update for nginx","description":"This update for nginx fixes the following issue\n\n- CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping\n  captures (bsc#1266215).\n","status":"published","published":"2026-06-09T08:12:26Z","modified":"2026-06-10T08:30:05.288645536Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:2370-1","title":"Security update for nginx","description":"This update for nginx fixes the following issues\n\n- CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping\n  captures (bsc#1266215).\n- CVE-2026-27651: denial of service via undisclosed requests when the `ngx_mail_auth_http_module` is enabled\n  (bsc#1260415).\n- CVE-2026-32647: NGINX worker memory over-read or over-write via a specially crafted MP4 file (bsc#1260420).\n- CVE-2026-40701: heap use-after-free in the worker process when the `ssl_verify_client` and the `ssl_ocsp` directives\n  are set due to issue in the `ngx_http_ssl_module` module (bsc#1265229).\n- CVE-2026-42934: heap buffer overread in the worker process due to issue in the `ngx_http_charset_module` module\n  (bsc#1265231).\n- CVE-2026-42945: heap buffer overflow via crafted HTTP requests due to issue in `ngx_http_rewrite_module`\n  (bsc#1265232).\n- CVE-2026-42946: excessive memory allocation and data overread due to issue in the `ngx_http_scgi_module` and\n  `ngx_http_uwsgi_module` modules (bsc#1265233).\n","status":"published","published":"2026-06-11T13:23:38Z","modified":"2026-06-12T08:45:05.877106734Z","updated_at":"2026-11-02T15:54:03.991985Z"}]}}