Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/nginx@1.28.3-r0?arch=x86_64&distroversion=edge&reponame=main
purl pkg:apk/alpine/nginx@1.28.3-r0?arch=x86_64&distroversion=edge&reponame=main
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (6)
Vulnerability Summary Aliases
VCID-2cu7-pyw5-t3dm Injection in auth_http and XCLIENT CVE-2026-28753
VCID-3czf-dtzg-8kdm NULL pointer dereference while using CRAM-MD5 or APOP CVE-2026-27651
VCID-fmvd-vyt7-mkfk Buffer overflow in ngx_http_dav_module CVE-2026-27654
VCID-kpjx-rrjs-subs OCSP result bypass in stream CVE-2026-28755
VCID-sxf9-qr1j-u3et Buffer overflow in the ngx_http_mp4_module CVE-2026-27784
VCID-z3xb-4krg-rbae Buffer overflow in the ngx_http_mp4_module CVE-2026-32647

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-03T17:48:17.367415+00:00 Alpine Linux Importer Fixing VCID-3czf-dtzg-8kdm https://secdb.alpinelinux.org/edge/main.json 38.1.0
2026-04-01T19:14:24.452540+00:00 Alpine Linux Importer Fixing VCID-2cu7-pyw5-t3dm https://secdb.alpinelinux.org/edge/main.json 38.0.0
2026-04-01T19:12:04.156380+00:00 Alpine Linux Importer Fixing VCID-fmvd-vyt7-mkfk https://secdb.alpinelinux.org/edge/main.json 38.0.0
2026-04-01T19:09:48.506360+00:00 Alpine Linux Importer Fixing VCID-sxf9-qr1j-u3et https://secdb.alpinelinux.org/edge/main.json 38.0.0
2026-04-01T19:03:33.467302+00:00 Alpine Linux Importer Fixing VCID-kpjx-rrjs-subs https://secdb.alpinelinux.org/edge/main.json 38.0.0
2026-04-01T18:51:42.727145+00:00 Alpine Linux Importer Fixing VCID-z3xb-4krg-rbae https://secdb.alpinelinux.org/edge/main.json 38.0.0