Search for packages
| purl | pkg:deb/debian/nginx@1.18.0-6.1%2Bdeb11u3 |
| Next non-vulnerable version | 1.22.1-9+deb12u4 |
| Latest non-vulnerable version | 1.28.3-2 |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-22cq-z7km-cfdc
Aliases: CVE-2025-23419 |
SSL session reuse vulnerability |
Affected by 7 other vulnerabilities. |
|
VCID-2cu7-pyw5-t3dm
Aliases: CVE-2026-28753 |
Injection in auth_http and XCLIENT |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-3czf-dtzg-8kdm
Aliases: CVE-2026-27651 |
NULL pointer dereference while using CRAM-MD5 or APOP |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-5781-s1ny-q7ey
Aliases: CVE-2023-44487 GHSA-2m7v-gc89-fjqf GHSA-qppj-fm5r-hxr3 GHSA-vx74-f528-fxqg GHSA-xpw8-rcwv-8f8p GMS-2023-3377 VSV00013 |
Affected by 0 other vulnerabilities. |
|
|
VCID-c4ta-jqmg-wfgf
Aliases: CVE-2024-33452 |
lua-nginx-module: HTTP request smuggling via a crafted HEAD request |
Affected by 7 other vulnerabilities. |
|
VCID-d1c6-dt2p-9kaa
Aliases: CVE-2026-1642 |
SSL upstream injection |
Affected by 7 other vulnerabilities. |
|
VCID-eb23-pd25-yqg3
Aliases: CVE-2024-7347 |
Buffer overread in the ngx_http_mp4_module |
Affected by 7 other vulnerabilities. |
|
VCID-fmvd-vyt7-mkfk
Aliases: CVE-2026-27654 |
Buffer overflow in ngx_http_dav_module |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-hemy-pnpj-sfg3
Aliases: CVE-2025-53859 |
Buffer overread in the ngx_mail_smtp_module |
Affected by 7 other vulnerabilities. |
|
VCID-kpjx-rrjs-subs
Aliases: CVE-2026-28755 |
OCSP result bypass in stream |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-sxf9-qr1j-u3et
Aliases: CVE-2026-27784 |
Buffer overflow in the ngx_http_mp4_module |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-y3tg-7fge-1yfy
Aliases: CVE-2020-36309 |
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header. |
Affected by 7 other vulnerabilities. |
|
VCID-z3xb-4krg-rbae
Aliases: CVE-2026-32647 |
Buffer overflow in the ngx_http_mp4_module |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-36pf-ddpb-3khs | security update |
CVE-2020-11724
|
| VCID-3ysf-pvuu-47bs | nginx: HTTP request smuggling in configurations with URL redirect used as error_page |
CVE-2019-20372
|
| VCID-9hzg-r1fj-pubf | Excessive CPU usage in HTTP/2 with priority changes |
CVE-2019-9513
|
| VCID-c9ym-ckeq-63dq | Memory corruption in the ngx_http_mp4_module |
CVE-2022-41741
|
| VCID-cbn4-utmp-n7ba | 1-byte memory overwrite in resolver |
CVE-2021-23017
|
| VCID-dmv4-ydq9-a7eq | Excessive CPU usage in HTTP/2 with small window updates |
CVE-2019-9511
|
| VCID-kcsp-h1s5-wbea | Excessive memory usage in HTTP/2 with zero length headers |
CVE-2019-9516
|
| VCID-u8aq-2qhu-gff5 | ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication |
CVE-2021-3618
|
| VCID-wc3j-5xmu-kyex | Memory disclosure in the ngx_http_mp4_module |
CVE-2022-41742
|