Tracked topic
TL;DR: If you are running NGINX Open Source below 1.30.1 or 1.31.0, you are affected by the current ngx_http_rewrite_module CVE batch. For Kubernetes ingress-nginx users this is especially relevant — the retired controll…
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source belo…
CVE-2026-9256 - "nginx-poolslip", another new vulnerability in the rewrite module
CVE-2026-42945 : NGINX Heap Buffer Overflow in rewrite module - Writeup and PoC
I have some containers running for production with Docker Desktop in Windows Server 2022 (WSL2 backend), and every time the system is rebooted (because they want the system to run only when it is used, so it is shut down…
