Serveurs web

Nginx

Versions

Branche	Dernière version	Fin de support
1.31	1.31.8	Maintenue
1.30	1.30.6	Maintenue
1.29	1.29.8	Terminée 13 mai 2026
1.28	1.28.3	Terminée 14 avril 2026
1.27	1.27.5	Terminée 24 juin 2025
1.26	1.26.3	Terminée 23 avril 2025
1.25	1.25.5	Terminée 29 mai 2024
1.24	1.24.0	Terminée 23 avril 2024

Vérifier sa version

nginx -v

Alertes

P3Modérée Nginx : exécution de code à distance — corrigée en 37.1.0.1, 5.7.0, 1.0.2, 1.31.7 Multiples vulnérabilités dans les produits F5 · CVE-2026-101019, CVE-2026-101025, CVE-2026-104939 et 8 autres

À distanceGravité à qualifier

il y a 4 j P3Modérée Nginx : vulnérabilité nginx-1.30.5 stable and nginx-1.31.6 mainline versions have been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439). · CVE-2026-90439

Gravité à qualifier

il y a 38 j P3Modérée Nginx : contournement des contrôles d'accès njs-1.0.1 version has been released, with fixes for access control bypass vulnerability in js_access (CVE-2026-18329), worker process crash vulnerability in ngx.fetch() (CVE-2026-78222), and heap buffer overflow vulnerability in xml.exclusiveC14n() (CVE-2026-78689). · CVE-2026-18329, CVE-2026-78222, CVE-2026-78689

Gravité à qualifier

il y a 51 j P3Modérée Nginx : vulnérabilité nginx-1.30.4 stable and nginx-1.31.3 mainline versions have been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using… · CVE-2026-42533, CVE-2026-56434, CVE-2026-60005

Gravité à qualifier

il y a 100 j P3Modérée Nginx : vulnérabilité nginx-1.30.3 stable and nginx-1.31.2 mainline versions have been released, with fixes for buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142). Additionally,… · CVE-2026-42055, CVE-2026-42530, CVE-2026-48142

EPSS 7 %Gravité à qualifier

il y a 128 j

Dernières publications

DSA-6575-1 nginx - security update Debian — avis de sécurité (DSA) · 21 oct. 2026, 02:00 · CVE-2026-15176, CVE-2026-93479, CVE-2026-95101, CVE-2026-97205
Multiples vulnérabilités dans les produits F5 CERT-FR — avis · 19 oct. 2026, 02:00 · CVE-2026-101019, CVE-2026-101025, CVE-2026-104939, CVE-2026-15176
njs-1.0.2 version has been released, with fixes for memory exhaustion vulnerability when parsing malformed XML (CVE-2026-101025), and inconsistent XML attribute values affecting signed XML validation (CVE-2026-101019). Nginx — annonces · 13 oct. 2026, 23:00 · CVE-2026-101019, CVE-2026-101025
nginx-1.30.5 stable and nginx-1.31.6 mainline versions have been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439). Nginx — annonces · 14 sept. 2026, 23:00 · CVE-2026-90439
njs-1.0.1 version has been released, with fixes for access control bypass vulnerability in js_access (CVE-2026-18329), worker process crash vulnerability in ngx.fetch() (CVE-2026-78222), and heap buffer overflow vulnerability in xml.exclusiveC14n() (CVE-2026-78689). Nginx — annonces · 1 sept. 2026, 23:00 · CVE-2026-18329, CVE-2026-78222, CVE-2026-78689
nginx-1.30.4 stable and nginx-1.31.3 mainline versions have been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using… Nginx — annonces · 14 juil. 2026, 23:00 · CVE-2026-42533, CVE-2026-56434, CVE-2026-60005
nginx-1.30.3 stable and nginx-1.31.2 mainline versions have been released, with fixes for buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142). Additionally,… Nginx — annonces · 16 juin 2026, 23:00 · CVE-2026-42055, CVE-2026-42530, CVE-2026-48142