crítica
CVE-2026-42945
nginx: NGINX: Arbitrary Code Execution Vulnerability
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Red Hat8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitnami9.2CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
La etiqueta propia de Trivy es CRITICAL. Crítica según Red Hat, AlmaLinux, Azure Linux, Bitnami, Oracle, Rocky Linux. Más baja según Amazon (alta), Photon OS (alta), Ubuntu (alta).
Descripción
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 10 | nginx, nginx-all-modules, nginx-core y 7 más | 2:1.26.3-6.el10_2.3 |
| alma 8 | nginx:1.24::nginx, nginx:1.24::nginx-all-modules, nginx:1.24::nginx-filesystem y 6 más | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 9 | nginx, nginx-all-modules, nginx-core y 11 más | 2:1.20.1-28.el9_8.2.alma.1 y 2 más |
| Azure Linux 3.0 | nginx | 0:1.28.3-2.azl3 |
| bitnami::Bitnami Vulnerability Database | nginx, nginx-gateway | 1.30.1 |
| Oracle Linux 8 | nginx, nginx-all-modules, nginx-filesystem y 6 más | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 9 | nginx, nginx-all-modules, nginx-core y 7 más | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| rocky 10 | nginx, nginx-all-modules, nginx-core y 6 más | 2:1.26.3-6.el10_2.3 |
| rocky 8 | nginx:1.24::nginx, nginx:1.24::nginx-all-modules, nginx:1.24::nginx-filesystem y 6 más | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 9 | nginx, nginx-all-modules, nginx-core y 26 más | 2:1.20.1-28.el9_8.2.rocky.0.1 y 2 más |
| alpine 3.21 | nginx | 1.26.3-r1 |
| alpine 3.22 | nginx | 1.28.3-r1 |
Mostrar las 196 entradas de 43 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 10 | nginx | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-all-modules | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-core | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-filesystem | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-devel | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-http-image-filter | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-http-perl | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-http-xslt-filter | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-mail | 2:1.26.3-6.el10_2.3 |
| alma 10 | nginx-mod-stream | 2:1.26.3-6.el10_2.3 |
| alma 8 | nginx:1.24::nginx | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-all-modules | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-filesystem | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-devel | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-http-image-filter | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-http-perl | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-http-xslt-filter | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-mail | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 8 | nginx:1.24::nginx-mod-stream | 1:1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1 |
| alma 9 | nginx | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-all-modules | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-core | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-filesystem | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-devel | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.2.alma.1 |
| alma 9 | nginx:1.24::nginx-all-modules | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| alma 9 | nginx:1.24::nginx-filesystem | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| alma 9 | nginx:1.26::nginx-all-modules | 2:1.26.3-9.module_el9.8.0+247+aa936373 |
| alma 9 | nginx:1.26::nginx-filesystem | 2:1.26.3-9.module_el9.8.0+247+aa936373 |
| Azure Linux 3.0 | nginx | 0:1.28.3-2.azl3 |
| bitnami::Bitnami Vulnerability Database | nginx | 1.30.1 |
| bitnami::Bitnami Vulnerability Database | nginx-gateway | 1.30.1 |
| Oracle Linux 8 | nginx | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-all-modules | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-filesystem | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-devel | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-http-image-filter | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-http-perl | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-http-xslt-filter | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-mail | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 8 | nginx-mod-stream | 1:1.24.0-3.0.1.module+el8.10.0+90893+b2195e14.1 |
| Oracle Linux 9 | nginx | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-all-modules | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-core | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-filesystem | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-devel | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-http-image-filter | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-http-perl | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-http-xslt-filter | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-mail | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| Oracle Linux 9 | nginx-mod-stream | 2:1.26.3-9.0.1.module+el9.8.0+90902+e2e6d896 |
| rocky 10 | nginx | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-all-modules | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-core | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-filesystem | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-http-image-filter | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-http-perl | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-http-xslt-filter | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-mail | 2:1.26.3-6.el10_2.3 |
| rocky 10 | nginx-mod-stream | 2:1.26.3-6.el10_2.3 |
| rocky 8 | nginx:1.24::nginx | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-all-modules | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-filesystem | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-devel | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-http-image-filter | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-http-perl | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-http-xslt-filter | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-mail | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 8 | nginx:1.24::nginx-mod-stream | 1:1.24.0-3.module+el8.10.0+40144+38158758 |
| rocky 9 | nginx | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-all-modules | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-core | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-filesystem | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-all-modules | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-core | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-filesystem | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-devel | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-http-image-filter | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-http-perl | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-http-xslt-filter | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-mail | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.24::nginx-mod-stream | 1:1.24.0-7.module+el9.8.0+40193+7b2d11e4.1.rocky.0.1 |
| rocky 9 | nginx:1.26::nginx | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-all-modules | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-core | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-filesystem | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-devel | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-http-image-filter | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-http-perl | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-http-xslt-filter | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-mail | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| rocky 9 | nginx:1.26::nginx-mod-stream | 2:1.26.3-9.module+el9.8.0+40194+40adfc1b |
| alpine 3.21 | nginx | 1.26.3-r1 |
| alpine 3.22 | nginx | 1.28.3-r1 |
| alpine 3.23 | nginx | 1.28.3-r1 |
| alpine 3.24 | nginx | 1.30.1-r0 |
| alpine edge | nginx | 1.30.1-r0 |
| amazon linux 2023 | nginx | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-all-modules | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-core | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-core-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-debugsource | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-filesystem | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-devel | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-image-filter | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-image-filter-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-perl | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-perl-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-xslt-filter | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-http-xslt-filter-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-mail | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-mail-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-stream | 1:1.30.1-1.amzn2023.0.1 |
| amazon linux 2023 | nginx-mod-stream-debuginfo | 1:1.30.1-1.amzn2023.0.1 |
| chainguard | ingress-nginx-controller-1.13 | 1.13.9-r9 |
| chainguard | ingress-nginx-controller-1.14 | 1.14.5-r12 |
| chainguard | ingress-nginx-controller-1.15 | 1.15.5-r1 |
| chainguard | ingress-nginx-controller-fips-1.13 | 1.13.9-r9 |
| chainguard | ingress-nginx-controller-fips-1.14 | 1.14.5-r9 |
| chainguard | ingress-nginx-controller-fips-1.15 | 1.15.5-r1 |
| chainguard | nginx-mainline | 1.31.0-r0 |
| chainguard | nginx-stable | 1.30.1-r0 |
| debian 11 | nginx | 1.18.0-6.1+deb11u6 |
| debian 12 | nginx | 1.22.1-9+deb12u7 |
| debian 13 | nginx | 1.26.3-3+deb13u5 |
| debian 14 | nginx | 1.30.0-3 |
| echo | nginx | 1.22.1-9+deb12u7 |
| echo | nginx-1.30 | 1.30.1 |
| echo | nginx-1.31 | 1.31.0 |
| minimos | nginx-1.30 | 1.30.1-r0 |
| Photon OS 4.0 | nginx | 1.26.3-3.ph4 |
| rapidfort alma 9 | nginx-all-modules | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| rapidfort alma 9 | nginx-filesystem | 1:1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1 |
| rapidfort alpine 3.20 | nginx | 1.26.3-r1, 1.28.3-r1 |
| rapidfort alpine 3.21 | nginx | 1.26.3-r1, 1.28.3-r1 |
| rapidfort alpine 3.22 | nginx | 1.26.3-r1, 1.28.3-r1 |
| rapidfort alpine 3.23 | nginx | 1.28.3-r1 |
| rapidfort alpine 3.24 | nginx | 1.28.3-r1, 1.30.1-r0 |
| rapidfort debian 12 | nginx | 0:1.26.3-3+deb13u5, 0:1.30.0-3 |
| rapidfort debian 12 | rf-nginx | 0:1.29.4-1~noble |
| rapidfort debian 13 | nginx | 0:1.26.3-3+deb13u5, 0:1.30.0-3 |
| rapidfort debian 13 | rf-nginx | 0:1.29.4-1~noble |
| rapidfort fedora 41 | nginx | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | nginx-core | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | nginx-filesystem | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | rf-nginx | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | rf-nginx-core | 2:1.28.0-3.fc41 |
| rapidfort fedora 41 | rf-nginx-filesystem | 2:1.28.0-3.fc41 |
| rapidfort fedora 43 | nginx | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-all-modules | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-core | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-filesystem | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-brotli | 1.0.0~rc-9.fc43 |
| rapidfort fedora 43 | nginx-mod-devel | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-fancyindex | 0.6.0-4.fc43 |
| rapidfort fedora 43 | nginx-mod-headers-more | 0.39-9.fc43 |
| rapidfort fedora 43 | nginx-mod-http-image-filter | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-http-perl | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-http-xslt-filter | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-mail | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-modsecurity | 1.0.4-10.fc43 |
| rapidfort fedora 43 | nginx-mod-naxsi | 1.6-17.fc43 |
| rapidfort fedora 43 | nginx-mod-stream | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | nginx-mod-vts | 0.2.4-9.fc43 |
| rapidfort fedora 43 | rf-nginx | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | rf-nginx-core | 2:1.30.1-1.fc43 |
| rapidfort fedora 43 | rf-nginx-filesystem | 2:1.30.1-1.fc43 |
| rapidfort rocky 9 | nginx | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-core | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-http-image-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-http-perl | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-http-xslt-filter | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-mail | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| rapidfort rocky 9 | nginx-mod-stream | 2:1.20.1-28.el9_8.2.rocky.0.1 |
| root.io debian 12 | rootio-nginx | 1.22.1-9+deb12u7 |
| ubuntu 18.04-ESM | nginx | 1.14.0-0ubuntu1.11+esm2 |
| ubuntu 20.04-ESM | nginx | 1.18.0-0ubuntu1.7+esm1 |
| ubuntu 22.04 | nginx | 1.18.0-6ubuntu14.11 |
| ubuntu 24.04 | nginx | 1.24.0-2ubuntu7.8 |
| ubuntu 25.10 | nginx | 1.28.0-6ubuntu1.3 |
| ubuntu 26.04 | nginx | 1.28.3-2ubuntu1.1 |
| wolfi | ingress-nginx-controller-1.14 | 1.14.5-r12 |
| wolfi | ingress-nginx-controller-1.15 | 1.15.5-r1 |
| wolfi | nginx-mainline | 1.31.0-r0 |
| wolfi | nginx-stable | 1.30.1-r0 |
Referencias
- https://access.redhat.com/errata/RHSA-2026:17417
- https://access.redhat.com/errata/RHSA-2026:17751
- https://access.redhat.com/errata/RHSA-2026:17752
- https://access.redhat.com/errata/RHSA-2026:17753
- https://access.redhat.com/errata/RHSA-2026:17790
- https://access.redhat.com/errata/RHSA-2026:17791
- https://access.redhat.com/errata/RHSA-2026:17792
- https://access.redhat.com/errata/RHSA-2026:17793
Las 48 referencias
- https://access.redhat.com/errata/RHSA-2026:17794
- https://access.redhat.com/errata/RHSA-2026:18029
- https://access.redhat.com/errata/RHSA-2026:18041
- https://access.redhat.com/errata/RHSA-2026:18063
- https://access.redhat.com/errata/RHSA-2026:19159
- https://access.redhat.com/errata/RHSA-2026:19371
- https://access.redhat.com/errata/RHSA-2026:19372
- https://access.redhat.com/errata/RHSA-2026:19374
- https://access.redhat.com/errata/RHSA-2026:20442
- https://access.redhat.com/errata/RHSA-2026:20444
- https://access.redhat.com/errata/RHSA-2026:21275
- https://access.redhat.com/errata/RHSA-2026:22382
- https://access.redhat.com/errata/RHSA-2026:22383
- https://access.redhat.com/errata/RHSA-2026:22388
- https://access.redhat.com/errata/RHSA-2026:22389
- https://access.redhat.com/errata/RHSA-2026:22390
- https://access.redhat.com/errata/RHSA-2026:22393
- https://access.redhat.com/errata/RHSA-2026:22394
- https://access.redhat.com/errata/RHSA-2026:22396
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/security/cve/CVE-2026-42945
- https://bugzilla.redhat.com/2477116
- https://bugzilla.redhat.com/show_bug.cgi?id=2477116
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42945
- https://depthfirst.com/nginx-rift
- https://depthfirst.com/research/nginx-rift-achieving-nginx-rce-via-an-18-year-old-vulnerability
- https://errata.almalinux.org/9/ALSA-2026-19374.html
- https://errata.rockylinux.org/RLSA-2026:19374
- https://github.com/DepthFirstDisclosures/Nginx-Rift
- https://linux.oracle.com/cve/CVE-2026-42945.html
- https://linux.oracle.com/errata/ELSA-2026-19374.html
- https://my.f5.com/manage/s/article/K000161019
- https://nginx.org/en/security_advisories.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-42945
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42945.json
- https://ubuntu.com/security/notices/USN-8271-1
- https://ubuntu.com/security/notices/USN-8375-1
- https://www.cve.org/CVERecord?id=CVE-2026-42945
- https://www.openwall.com/lists/oss-security/2026/05/13/7