CVE-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

PT-2026-66835

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0935

Updates of 'nginx', 'erlang', 'libsolv', 'linux', 'go', 'linux-esx' packages of Photon OS have been released...

CLEANSTART-2026-KL00437 Security fixes in ingress-nginx-controller-1.12 1.12.8-r0

Package ingress-nginx-controller-1.12 version 1.12.8-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2024-55549, CVE-2025-24855...

CLEANSTART-2026-RF39615 Security fixes in nginx 1.24.0-r12

Package nginx version 1.24.0-r12 fixes 1 vulnerabilities: CVE-2023-44487...

CLEANSTART-2026-QV63914 Security fixes in ingress-nginx-controller 1.24.2-r0

Package ingress-nginx-controller version 1.24.2-r0 fixes 9 vulnerabilities: CVE-2025-22871, CVE-2025-4673, CVE-2024-45341, CVE-2024-45336, CVE-2025-0913...

CLEANSTART-2026-CW84723 Security fixes in ingress-nginx-controller-1.14 1.14.5-r3

Package ingress-nginx-controller-1.14 version 1.14.5-r3 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2024-55549, CVE-2025-24855...

CLEANSTART-2026-QY68123 Security fixes in nginx 1.16.1-r6

Package nginx version 1.16.1-r6 fixes 1 vulnerabilities: CVE-2019-20372...

CLEANSTART-2026-EM10035 Security fixes in nginx 1.20.1-r1

Package nginx version 1.20.1-r1 fixes 1 vulnerabilities: CVE-2021-3618...

CLEANSTART-2026-WO51629 Security fixes in ingress-nginx-controller-1.12 1.14.5-r1

Package ingress-nginx-controller-1.12 version 1.14.5-r1 fixes 10 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507, CVE-2026-39824, CVE-2026-25681...

CLEANSTART-2026-ZL14061 Security fixes in nginx 1.20.1-r0

Package nginx version 1.20.1-r0 fixes 1 vulnerabilities: CVE-2021-23017...

CLEANSTART-2026-AW13748 Security fixes in ingress-nginx-controller-1.15 1.15.1-r3

Package ingress-nginx-controller-1.15 version 1.15.1-r3 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-TQ49781 Security fixes in ingress-nginx-controller-1.15 1.15.1-r2

Package ingress-nginx-controller-1.15 version 1.15.1-r2 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...

CLEANSTART-2026-DI60176 Security fixes in nginx 1.22.1-r0

Package nginx version 1.22.1-r0 fixes 2 vulnerabilities: CVE-2022-41741, CVE-2022-41742...

CLEANSTART-2026-XZ21760 Security fixes in nginx-prometheus-exporter 1.5.1-r0

Package nginx-prometheus-exporter version 1.5.1-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-61729, CVE-2025-61728, CVE-2025-61731, CVE-2025-61731...

CLEANSTART-2026-SL54475 Security fixes in nginx 1.16.1-r0

Package nginx version 1.16.1-r0 fixes 3 vulnerabilities: CVE-2019-9511, CVE-2019-9513, CVE-2019-9516...

CLEANSTART-2026-TI67448 Security fixes in nginx-prometheus-exporter-fips 1.5.1-r1

Package nginx-prometheus-exporter-fips version 1.5.1-r1 fixes 30 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

CLEANSTART-2026-YT08737 Security fixes in nginx-prometheus-exporter 1.5.1-r2

Package nginx-prometheus-exporter version 1.5.1-r2 fixes 21 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

[SECURITY] Fedora 43 Update: nginx-mod-vts-0.2.4-13.fc43

Nginx virtual host traffic status module...

[SECURITY] Fedora 43 Update: nginx-mod-modsecurity-1.0.4-16.fc43

The ModSecurity-nginx connector is the connection point between nginx and libmodsecurity ModSecurity v3. Said another way, this project provides a communication channel between nginx and libmodsecurity. This connector is required to use LibModSecurity with nginx. The ModSecurity-nginx connector...