// tag
nginx
Security incidents tagged nginx. Newest first.
- incidents
- 1
- live
- 0
- patched
- 1
## 1 nginx incident in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
- mediumclosedpatchedclosed Oct 14, 2026
nginx 1.31.7 / 1.30.6 security fixes (HTTP/3, TLS tickets, overflows)
› nginx
nginx published multiple medium/major advisories fixed in 1.31.7+ and 1.30.6+, including HTTP/3 request-body injection (CVE-2026-95101), TLS session-ticket forgery (CVE-2026-97629), AIO use-after-free (CVE-2026-97205), and buffer overflows in alias/rewrite and map/regex paths. Same-day chatter bundled this with the PHP/Node/GitLab rush for anyone terminating HTTP on nginx.
CVE-2026-15176CVE-2026-93479CVE-2026-95101CVE-2026-97629+1 more
