{"id":"nginx-e7890b4be863","seq":2954,"kind":"release","title":"nginx-1.30.6 stable and nginx-1.31.7 mainline versions have been released, with fixes for buffer overflow vulnerability when using alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when evaluating string expressions with variables (CVE-2026-93479), request body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery vulnerability when using TLS session ticket key rotation (CVE-2026-97629), and use-after-free vulnerability when using ngx_http_ssi_module with AIO (CVE-2026-97205).","url":"http://nginx.org/#2026-10-14","permalink":"https://vulnpulse.app/items/nginx-e7890b4be863","summary":"2026-10-14 nginx-1.30.6 stable and nginx-1.31.7 mainline versions have been released, with fixes for buffer overflow vulnerability when using alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when evaluating string expressions with variables (CVE-2026-93479), request body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery vulnerability when using TLS session ticket key rotation (CVE-2026-97629), and use-after-free vulnerability when using ngx_http_ssi_module with AIO (CVE-2026-97205).","severity":null,"techs":["nginx"],"cves":["CVE-2026-15176","CVE-2026-93479","CVE-2026-95101","CVE-2026-97629","CVE-2026-97205"],"tags":["security"],"source":{"id":"nginx","name":"nginx News"},"published_at":"2026-10-13T21:00:00.000Z","fetched_at":"2026-10-21T16:17:48.390Z"}