Vulnerabilidades de Nginx

Nginx

(NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ ...)

Sin parche todavía.

Nginx

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the…

Corregida en Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

Nginx

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before…

Corregida en Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

Nginx

Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticated attacker may be…

Corregida en Debian 13 y Debian 14.

Nginx

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes…

Corregida en Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

Nginx

Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL…

Corregida en Debian 13, Debian 14, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

Nginx

nginx ignition is a user interface for the nginx web server. Prior to version 2.41.1, `POST /api/users/onboarding/finish` is registered as anonymous (unauthenticated) and creates a user with full…

Sin parche todavía.

Nginx

nginx ignition is a user interface for the nginx web server. In versions 2.29.0 through 2.40.0, the gin i18n middleware in nginx-ignition's API server runs in front of every HTTP request and calls…

Sin parche todavía.

Nginx

nginx ignition is a user interface for the nginx web server. In versions 2.33.0 through 2.35.0, any user that has enabled the OTP 2FA can have their TOTP reused during the standard 30 second validity…

Sin parche todavía.

Nginx

A security issue was fixed in nginx.

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

Nginx

nginx vulnerability

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

Nginx

nginx regression

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

Nginx

vulnerabilidades de nginx

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

Nginx

regresión de nginx

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

Nginx

NGINX Plus y NGINX Open Source tienen una vulnerabilidad en el módulo ngx_http_ssi_module. Esta vulnerabilidad puede existir cuando se configuran Server-Side Includes (SSI), proxy_pass y la directiva…

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

Nginx

NGINX Plus y NGINX Open Source tienen una vulnerabilidad en el módulo ngx_http_slice_module. Cuando se configuran la directiva slice y capturas de expresión regular sin nombre, o cuando ocurre una…

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.