VulnerableCode Package Details - pkg:nginx/nginx@1.30.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:nginx/nginx@1.30.0

Essentials
History (7)

purl	pkg:nginx/nginx@1.30.0

Next non-vulnerable version	1.30.2
Latest non-vulnerable version	1.31.1
Risk	3.6

Vulnerabilities affecting this package (7)

Vulnerability	Summary	Fixed by
VCID-32j6-kbr6-r7dg Aliases: CVE-2026-42946	Buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_module	1.30.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.31.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-3as4-zwhp-subb Aliases: CVE-2026-40460	HTTP/3 address spoofing	1.30.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.31.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-4hb5-9vcu-1qcx Aliases: CVE-2026-9256	Buffer overflow in the ngx_http_rewrite_module	1.30.2 Affected by 0 other vulnerabilities. 1.31.1 Affected by 0 other vulnerabilities.
VCID-b7gd-xc8p-rkhg Aliases: CVE-2026-42945	Buffer overflow in the ngx_http_rewrite_module	1.30.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.31.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-ek45-99as-yqc4 Aliases: CVE-2026-42926	HTTP/2 request injection in the ngx_http_proxy_module	1.30.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.31.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-n8jk-dj3t-d7a7 Aliases: CVE-2026-42934	Buffer overread in the ngx_http_charset_module	1.30.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.31.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-nmg1-jm1d-zbhn Aliases: CVE-2026-40701	resolver use-after-free in OCSP	1.30.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.31.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-05-31T10:13:05.279085+00:00	Nginx Importer	Affected by	VCID-4hb5-9vcu-1qcx	https://nginx.org/en/security_advisories.html	38.6.0
2026-05-30T20:31:04.635515+00:00	Nginx Importer	Affected by	VCID-3as4-zwhp-subb	https://nginx.org/en/security_advisories.html	38.6.0
2026-05-30T20:31:04.224041+00:00	Nginx Importer	Affected by	VCID-b7gd-xc8p-rkhg	https://nginx.org/en/security_advisories.html	38.6.0
2026-05-30T20:31:04.136587+00:00	Nginx Importer	Affected by	VCID-ek45-99as-yqc4	https://nginx.org/en/security_advisories.html	38.6.0
2026-05-30T20:31:02.607025+00:00	Nginx Importer	Affected by	VCID-nmg1-jm1d-zbhn	https://nginx.org/en/security_advisories.html	38.6.0
2026-05-30T20:31:02.478631+00:00	Nginx Importer	Affected by	VCID-32j6-kbr6-r7dg	https://nginx.org/en/security_advisories.html	38.6.0
2026-05-30T20:31:02.331340+00:00	Nginx Importer	Affected by	VCID-n8jk-dj3t-d7a7	https://nginx.org/en/security_advisories.html	38.6.0