github.com/lucasdillmann/nginx-ignition vulnerabilities (Go)

3 vulnerabilities.

• github.com/lucasdillmann/nginx-ignition Go nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition CVE-2026-61628 Public exploitFix available 8.1 HighSeptember 21, 2026
• github.com/lucasdillmann/nginx-ignition Go nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware CVE-2026-61629 Fix available 7.5 HighSeptember 21, 2026
• github.com/lucasdillmann/nginx-ignition Go nginx ignition has TOTP Reuse During Validity Window CVE-2026-61630 Fix available 4.2 MediumSeptember 21, 2026