CVE-2026-78222

A flaw was found in NGINX. A remote attacker, by sending a specially crafted HTTP response to ngx.fetch, can cause an NGINX worker to crash when trusted JavaScript attempts to read the Response.statusText. This vulnerability requires the attacker to have control or influence over the fetched HTTP...