Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nginx/nginx@1.4.0
purl pkg:nginx/nginx@1.4.0
Next non-vulnerable version 1.29.7
Latest non-vulnerable version 1.29.7
Risk 10.0
Vulnerabilities affecting this package (10)
Vulnerability Summary Fixed by
VCID-2cu7-pyw5-t3dm
Aliases:
CVE-2026-28753
Injection in auth_http and XCLIENT
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
VCID-3czf-dtzg-8kdm
Aliases:
CVE-2026-27651
NULL pointer dereference while using CRAM-MD5 or APOP
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
VCID-9kx7-1dn9-dbdt
Aliases:
CVE-2013-2028
Stack-based buffer overflow with specially crafted request
1.4.1
Affected by 8 other vulnerabilities.
1.5.0
Affected by 8 other vulnerabilities.
VCID-d1c6-dt2p-9kaa
Aliases:
CVE-2026-1642
SSL upstream injection
1.28.2
Affected by 7 other vulnerabilities.
1.29.5
Affected by 6 other vulnerabilities.
VCID-fmvd-vyt7-mkfk
Aliases:
CVE-2026-27654
Buffer overflow in ngx_http_dav_module
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
VCID-hemy-pnpj-sfg3
Aliases:
CVE-2025-53859
Buffer overread in the ngx_mail_smtp_module
1.29.1
Affected by 7 other vulnerabilities.
VCID-m1y8-m8z6-kyg9
Aliases:
CVE-2014-0133
SPDY heap buffer overflow
1.4.7
Affected by 7 other vulnerabilities.
1.5.12
Affected by 7 other vulnerabilities.
VCID-sxf9-qr1j-u3et
Aliases:
CVE-2026-27784
Buffer overflow in the ngx_http_mp4_module
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
VCID-u25m-v3f6-23dk
Aliases:
CVE-2013-2070
Memory disclosure with specially crafted HTTP backend responses
1.4.1
Affected by 8 other vulnerabilities.
1.5.0
Affected by 8 other vulnerabilities.
VCID-z3xb-4krg-rbae
Aliases:
CVE-2026-32647
Buffer overflow in the ngx_http_mp4_module
1.28.3
Affected by 1 other vulnerability.
1.29.7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-11T18:22:02.587694+00:00 Nginx Importer Affected by VCID-sxf9-qr1j-u3et https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:21:32.837679+00:00 Nginx Importer Affected by VCID-3czf-dtzg-8kdm https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:43.051909+00:00 Nginx Importer Affected by VCID-9kx7-1dn9-dbdt https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:39.133057+00:00 Nginx Importer Affected by VCID-d1c6-dt2p-9kaa https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:17.832533+00:00 Nginx Importer Affected by VCID-z3xb-4krg-rbae https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:07.600096+00:00 Nginx Importer Affected by VCID-fmvd-vyt7-mkfk https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:20:02.236336+00:00 Nginx Importer Affected by VCID-2cu7-pyw5-t3dm https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:19:52.744229+00:00 Nginx Importer Affected by VCID-hemy-pnpj-sfg3 https://nginx.org/en/security_advisories.html 38.3.0
2026-04-11T18:19:49.178646+00:00 Nginx Importer Affected by VCID-m1y8-m8z6-kyg9 https://nginx.org/en/security_advisories.html 38.3.0
2026-04-02T17:46:54.398786+00:00 Nginx Importer Affected by VCID-sxf9-qr1j-u3et https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:46:22.953963+00:00 Nginx Importer Affected by VCID-3czf-dtzg-8kdm https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:45:27.789525+00:00 Nginx Importer Affected by VCID-9kx7-1dn9-dbdt https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:45:22.890881+00:00 Nginx Importer Affected by VCID-d1c6-dt2p-9kaa https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:45:01.123558+00:00 Nginx Importer Affected by VCID-z3xb-4krg-rbae https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:44:50.129242+00:00 Nginx Importer Affected by VCID-fmvd-vyt7-mkfk https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:44:44.508918+00:00 Nginx Importer Affected by VCID-2cu7-pyw5-t3dm https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:44:33.113511+00:00 Nginx Importer Affected by VCID-hemy-pnpj-sfg3 https://nginx.org/en/security_advisories.html 38.1.0
2026-04-02T17:44:29.435447+00:00 Nginx Importer Affected by VCID-m1y8-m8z6-kyg9 https://nginx.org/en/security_advisories.html 38.1.0
2026-04-01T14:37:47.472523+00:00 Nginx Importer Affected by VCID-sxf9-qr1j-u3et https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:37:07.387981+00:00 Nginx Importer Affected by VCID-3czf-dtzg-8kdm https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:35:55.898581+00:00 Nginx Importer Affected by VCID-d1c6-dt2p-9kaa https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:35:28.591944+00:00 Nginx Importer Affected by VCID-z3xb-4krg-rbae https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:35:15.095463+00:00 Nginx Importer Affected by VCID-fmvd-vyt7-mkfk https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:35:08.916505+00:00 Nginx Importer Affected by VCID-2cu7-pyw5-t3dm https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:34:56.922367+00:00 Nginx Importer Affected by VCID-hemy-pnpj-sfg3 https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T14:34:52.415573+00:00 Nginx Importer Affected by VCID-m1y8-m8z6-kyg9 https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T12:31:46.018030+00:00 Nginx Importer Affected by VCID-9kx7-1dn9-dbdt https://nginx.org/en/security_advisories.html 38.0.0
2026-04-01T12:31:45.871109+00:00 Nginx Importer Affected by VCID-u25m-v3f6-23dk https://nginx.org/en/security_advisories.html 38.0.0