脆弱性・アップデート
10月21日(水)昨日
Weekly Report: 複数のNGINX製品に脆弱性
複数のNGINX製品に脆弱性
nginx-1.31.8 mainline version has been released.
2026-10-21 nginx-1.31.8 mainline version has been released.
10月14日(水)
nginx-1.30.6 stable and nginx-1.31.7 mainline versions have been released, with fixes for buffer overflow vulnerability when using alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when evaluating string expressions with variables (CVE-2026-93479), request body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery vulnerability when using TLS session ticket key rotation (CVE-2026-97629), and use-after-free vulnerability when using ngx_http_ssi_module with AIO (CVE-2026-97205).
2026-10-14 nginx-1.30.6 stable and nginx-1.31.7 mainline versions have been released, with fixes for buffer overflow vulnerability when using alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when evaluating string expressions with variables (CVE-2026-93479), request body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery vulnerability when using TLS session ticket key rotation (CVE-2026-97629), and use-after-free vulnerability when using ngx_http_ssi_module with AIO (CVE-2026-97205).
9月15日(火)
nginx-1.30.5 stable and nginx-1.31.6 mainline versions have been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439).
2026-09-15 nginx-1.30.5 stable and nginx-1.31.6 mainline versions have been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439).
9月2日(水)
nginx-1.31.5 mainline version has been released, featuring control API, predicate locations, and the ngx_http_json_module module.
2026-09-02 nginx-1.31.5 mainline version has been released, featuring control API , predicate locations , and the ngx_http_json_module module.
8月19日(水)
nginx-1.31.4 mainline version has been released.
2026-08-19 nginx-1.31.4 mainline version has been released.
7月15日(水)
nginx-1.30.4 stable and nginx-1.31.3 mainline versions have been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).
2026-07-15 nginx-1.30.4 stable and nginx-1.31.3 mainline versions have been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).
6月23日(火)
njs-1.0.0 version has been released, deprecating the njs engine in favor of QuickJS, aligning exception classes between the engines, and hardening ngx.fetch() request validation.
2026-06-23 njs-1.0.0 version has been released , deprecating the njs engine in favor of QuickJS, aligning exception classes between the engines, and hardening ngx.fetch() request validation.
6月17日(水)
nginx-1.30.3 stable and nginx-1.31.2 mainline versions have been released, with fixes for buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142). Additionally, nginx-1.31.2 includes a fix for use-after-free vulnerability in the ngx_http_v3_module (CVE-2026-42530).
2026-06-17 nginx-1.30.3 stable and nginx-1.31.2 mainline versions have been released, with fixes for buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142). Additionally, nginx-1.31.2 includes a fix for use-after-free vulnerability in the ngx_http_v3_module (CVE-2026-42530).
10月31日(金)
betterCode() PHP 2025
With version 8.5, PHP continues to evolve in its thirtieth year: the new pipe operator and numerous performance improvements make your development more efficient. At the same time, FrankenPHP is establishing itself in Caddy Server, a European open-source solution, as a modern alternative to Nginx. betterCode() PHP supports you in using PHP 8.5, switching to FrankenPHP and the Caddy Server. Artificial intelligence is also part of the software development toolkit today: if you want to use it effectively, you need clear architectures, clean code, and solid patterns. is an online conference lasti…
10月30日(木)
How to Fix 502 Error: PHP-FPM Socket Issues in PHP/Laravel Forge
Learn how missing or broken PHP-FPM sockets cause 502 Bad Gateway issues in Nginx, and how to restart PHP-FPM to resolve them.
1月11日(火)
Deploying Soketi to Laravel Forge - Part 2
In Part I of this tutorial we learnt how to install and deploy Soketi to our Laravel Forge servers. Currently, Soketi is accessible over our server's IP address, behind port 6001. In this post we're going to modify our setup so that we can access our socket server via socket.my-domain.com. We'll do this by using an Nginx reverse proxy.
11月6日(金)
Forge: Nginx Templates
Today we're excited to introduce a new feature to [Laravel Forge](https://laravel.com/forge) called **Nginx Templates**. These templates allow you to define your own base Nginx configuration files tha...