Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nginx/nginx@1.25.0
purl pkg:nginx/nginx@1.25.0
Next non-vulnerable version 1.29.7
Latest non-vulnerable version 1.29.7
Risk 3.7
Vulnerabilities affecting this package (12)
Vulnerability Summary Fixed by
VCID-2cu7-pyw5-t3dm
Aliases:
CVE-2026-28753
Injection in auth_http and XCLIENT
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
VCID-3czf-dtzg-8kdm
Aliases:
CVE-2026-27651
NULL pointer dereference while using CRAM-MD5 or APOP
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
VCID-8mzu-swrb-sqd8
Aliases:
CVE-2024-32760
Buffer overwrite in HTTP/3
1.26.1
Affected by 7 other vulnerabilities.
1.27.0
Affected by 8 other vulnerabilities.
VCID-d1c6-dt2p-9kaa
Aliases:
CVE-2026-1642
SSL upstream injection
1.28.2
Affected by 7 other vulnerabilities.
1.29.5
Affected by 6 other vulnerabilities.
VCID-fmvd-vyt7-mkfk
Aliases:
CVE-2026-27654
Buffer overflow in ngx_http_dav_module
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
VCID-hemy-pnpj-sfg3
Aliases:
CVE-2025-53859
Buffer overread in the ngx_mail_smtp_module
1.29.1
Affected by 7 other vulnerabilities.
VCID-k9vm-jbxf-dbf8
Aliases:
CVE-2024-31079
Stack overflow and use-after-free in HTTP/3
1.26.1
Affected by 7 other vulnerabilities.
1.27.0
Affected by 8 other vulnerabilities.
VCID-n3pn-h7s7-nfd4
Aliases:
CVE-2024-24990
Use-after-free in HTTP/3
1.25.4
Affected by 7 other vulnerabilities.
VCID-pchd-6b6f-myds
Aliases:
CVE-2024-34161
Memory disclosure in HTTP/3
1.26.1
Affected by 7 other vulnerabilities.
1.27.0
Affected by 8 other vulnerabilities.
VCID-pq29-p7wp-bqe3
Aliases:
CVE-2024-35200
NULL pointer dereference in HTTP/3
1.26.1
Affected by 7 other vulnerabilities.
1.27.0
Affected by 8 other vulnerabilities.
VCID-sxf9-qr1j-u3et
Aliases:
CVE-2026-27784
Buffer overflow in the ngx_http_mp4_module
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
VCID-z3xb-4krg-rbae
Aliases:
CVE-2026-32647
Buffer overflow in the ngx_http_mp4_module
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T14:14:31.828745+00:00 Nginx Importer Affected by VCID-sxf9-qr1j-u3et https://nginx.org/en/security_advisories.html 38.4.0
2026-04-16T14:13:59.324847+00:00 Nginx Importer Affected by VCID-3czf-dtzg-8kdm https://nginx.org/en/security_advisories.html 38.4.0
2026-04-16T14:13:06.797185+00:00 Nginx Importer Affected by VCID-n3pn-h7s7-nfd4 https://nginx.org/en/security_advisories.html 38.4.0
2026-04-16T14:12:56.321793+00:00 Nginx Importer Affected by VCID-d1c6-dt2p-9kaa https://nginx.org/en/security_advisories.html 38.4.0
2026-04-16T14:12:32.994025+00:00 Nginx Importer Affected by VCID-z3xb-4krg-rbae https://nginx.org/en/security_advisories.html 38.4.0
2026-04-16T14:12:21.600493+00:00 Nginx Importer Affected by VCID-fmvd-vyt7-mkfk https://nginx.org/en/security_advisories.html 38.4.0
2026-04-16T14:12:15.739085+00:00 Nginx Importer Affected by VCID-2cu7-pyw5-t3dm https://nginx.org/en/security_advisories.html 38.4.0
2026-04-16T14:12:04.710545+00:00 Nginx Importer Affected by VCID-hemy-pnpj-sfg3 https://nginx.org/en/security_advisories.html 38.4.0
2026-04-11T18:22:03.154159+00:00 Nginx Importer Affected by VCID-sxf9-qr1j-u3et https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:21:33.381766+00:00 Nginx Importer Affected by VCID-3czf-dtzg-8kdm https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:48.541760+00:00 Nginx Importer Affected by VCID-n3pn-h7s7-nfd4 https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:39.696106+00:00 Nginx Importer Affected by VCID-d1c6-dt2p-9kaa https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:18.403557+00:00 Nginx Importer Affected by VCID-z3xb-4krg-rbae https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:08.169313+00:00 Nginx Importer Affected by VCID-fmvd-vyt7-mkfk https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:02.789718+00:00 Nginx Importer Affected by VCID-2cu7-pyw5-t3dm https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:19:53.306079+00:00 Nginx Importer Affected by VCID-hemy-pnpj-sfg3 https://nginx.org/en/security_advisories.html 38.3.0
2026-04-02T17:46:54.944965+00:00 Nginx Importer Affected by VCID-sxf9-qr1j-u3et https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:46:23.502901+00:00 Nginx Importer Affected by VCID-3czf-dtzg-8kdm https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:45:33.477826+00:00 Nginx Importer Affected by VCID-n3pn-h7s7-nfd4 https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:45:23.441389+00:00 Nginx Importer Affected by VCID-d1c6-dt2p-9kaa https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:45:01.699980+00:00 Nginx Importer Affected by VCID-z3xb-4krg-rbae https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:44:50.682165+00:00 Nginx Importer Affected by VCID-fmvd-vyt7-mkfk https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:44:45.071904+00:00 Nginx Importer Affected by VCID-2cu7-pyw5-t3dm https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:44:33.672984+00:00 Nginx Importer Affected by VCID-hemy-pnpj-sfg3 https://nginx.org/en/security_advisories.html 38.1.0
2026-04-01T14:37:48.078281+00:00 Nginx Importer Affected by VCID-sxf9-qr1j-u3et https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:37:07.993718+00:00 Nginx Importer Affected by VCID-3czf-dtzg-8kdm https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:35:56.516738+00:00 Nginx Importer Affected by VCID-d1c6-dt2p-9kaa https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:35:29.167426+00:00 Nginx Importer Affected by VCID-z3xb-4krg-rbae https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:35:15.715504+00:00 Nginx Importer Affected by VCID-fmvd-vyt7-mkfk https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:35:09.507248+00:00 Nginx Importer Affected by VCID-2cu7-pyw5-t3dm https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:34:57.580409+00:00 Nginx Importer Affected by VCID-hemy-pnpj-sfg3 https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T12:31:46.396104+00:00 Nginx Importer Affected by VCID-pchd-6b6f-myds https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T12:31:46.224930+00:00 Nginx Importer Affected by VCID-8mzu-swrb-sqd8 https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T12:31:46.201862+00:00 Nginx Importer Affected by VCID-pq29-p7wp-bqe3 https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T12:31:46.049939+00:00 Nginx Importer Affected by VCID-n3pn-h7s7-nfd4 https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T12:31:45.592346+00:00 Nginx Importer Affected by VCID-k9vm-jbxf-dbf8 https://nginx.org/en/security_advisories.html 38.0.0