nginx

Direct Vulnerabilities

Known vulnerabilities in the nginx package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Uncontrolled Memory Allocation	*
M CVE-2026-9256	<1.18.0-0ubuntu1.7+esm1
M Out-of-bounds Read	<1.18.0-0ubuntu1.7+esm1
H Heap-based Buffer Overflow	<1.18.0-0ubuntu1.7+esm1
M Use After Free	<1.18.0-0ubuntu1.7+esm1
M Out-of-bounds Read	<1.18.0-0ubuntu1.7+esm1
M Uncontrolled Memory Allocation	<1.18.0-0ubuntu1.7+esm1
M CRLF Injection	<1.18.0-0ubuntu1.7+esm1
M Heap-based Buffer Overflow	<1.18.0-0ubuntu1.7+esm1
M Integer Overflow or Wraparound	<1.18.0-0ubuntu1.7+esm1
M NULL Pointer Dereference	<1.18.0-0ubuntu1.7+esm1
M Out-of-bounds Read	<1.18.0-0ubuntu1.7+esm1
M Insufficient Verification of Data Authenticity	<1.18.0-0ubuntu1.7+esm1
M Incorrect Authorization	<1.18.0-0ubuntu1.7
M Out-of-bounds Read	<1.18.0-0ubuntu1.6
M Out-of-bounds Write	<1.18.0-0ubuntu1.4
M Out-of-bounds Write	<1.18.0-0ubuntu1.4
L CVE-2020-36309	<1.18.0-0ubuntu1.3
L Improper Certificate Validation	<1.18.0-0ubuntu1.3
M Off-by-one Error	<1.18.0-0ubuntu1.2
M HTTP Request Smuggling	<1.18.0-0ubuntu1.3
M CVE-2019-9513	<1.16.1-0ubuntu1
M Allocation of Resources Without Limits or Throttling	<1.16.1-0ubuntu1