Digest
HIGH

NGINX Fixes Five Flaws, Including Potential RCE and TLS Bypass

NGINX has released versions 1.30.6 and 1.31.7 to address five vulnerabilities, one of which has existed since May 2005. The fixes include three memory bugs that could lead to worker process crashes or potential remote code execution under specific configurations. Additionally, a TLS bug could allow an attacker to forge a session and bypass client-certificate checks. Users are urged to update immediately.

← Back to the feed

Trending Tags