Direct Vulnerabilities

Known vulnerabilities in the nginx package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Use After Free

<1.18.0-6ubuntu14.17
  • M
Use of Uninitialized Resource

<1.18.0-6ubuntu14.17
  • M
Heap-based Buffer Overflow

*
  • M
CVE-2026-48142

<1.18.0-6ubuntu14.16
  • M
Out-of-bounds Write

<1.18.0-6ubuntu14.16
  • M
Uncontrolled Memory Allocation

<1.18.0-6ubuntu14.15
  • M
CVE-2026-9256

<1.18.0-6ubuntu14.12
  • M
Uncontrolled Memory Allocation

<1.18.0-6ubuntu14.12
  • M
Use After Free

<1.18.0-6ubuntu14.12
  • M
Out-of-bounds Read

<1.18.0-6ubuntu14.12
  • H
Heap-based Buffer Overflow

<1.18.0-6ubuntu14.11
  • M
CRLF Injection

<1.18.0-6ubuntu14.10
  • M
Out-of-bounds Read

<1.18.0-6ubuntu14.10
  • M
Integer Overflow or Wraparound

<1.18.0-6ubuntu14.10
  • M
Heap-based Buffer Overflow

<1.18.0-6ubuntu14.10
  • M
NULL Pointer Dereference

<1.18.0-6ubuntu14.10
  • M
Insufficient Verification of Data Authenticity

<1.18.0-6ubuntu14.8
  • M
Out-of-bounds Read

<1.18.0-6ubuntu14.7
  • M
Incorrect Authorization

<1.18.0-6ubuntu14.6
  • M
Out-of-bounds Read

<1.18.0-6ubuntu14.5
  • M
Out-of-bounds Write

<1.18.0-6ubuntu14.3
  • M
Out-of-bounds Write

<1.18.0-6ubuntu14.3
  • L
Improper Certificate Validation

<1.18.0-6ubuntu14.1
  • M
Off-by-one Error

<1.18.0-6ubuntu9
  • M
CVE-2019-9513

<1.16.1-0ubuntu1
  • M
Allocation of Resources Without Limits or Throttling

<1.16.1-0ubuntu1