nginx

Direct Vulnerabilities

Known vulnerabilities in the nginx package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M CVE-2026-48142	<1.21.5-150400.3.25.1
H Out-of-bounds Write	<1.21.5-150400.3.25.1
H Heap-based Buffer Overflow	<1.21.5-150400.3.25.1
H CVE-2026-9256	<1.21.5-150400.3.20.1
M Use After Free	<1.21.5-150400.3.20.1
M Out-of-bounds Read	<1.21.5-150400.3.20.1
M Uncontrolled Memory Allocation	<1.21.5-150400.3.20.1
H Heap-based Buffer Overflow	<1.21.5-150400.3.20.1
H Out-of-bounds Read	<1.21.5-150400.3.20.1
H NULL Pointer Dereference	<1.21.5-150400.3.20.1
L CRLF Injection	<1.21.5-150400.3.15.1
H Heap-based Buffer Overflow	<1.21.5-150400.3.15.1
H Integer Overflow or Wraparound	<1.21.5-150400.3.15.1
M Insufficient Verification of Data Authenticity	<1.21.5-150400.3.15.1
M Out-of-bounds Read	<1.21.5-150400.3.6.1
H CVE-2023-44487	<1.21.5-150400.3.6.1
H Out-of-bounds Write	<1.21.5-150400.3.3.1
H Out-of-bounds Write	<1.21.5-150400.3.3.1