Debian: Security Advisory (DLA-4228-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4228-1] nginx security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4228-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 24, 2025 https://wiki.debian.org/LTS -...

CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

Linux Distros Unpatched Vulnerability : CVE-2020-36309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or...

Ubuntu: Security Advisory (USN-5371-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : nginx vulnerabilities (USN-5371-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5371-1 advisory. It was discovered that nginx Lua module mishandled certain inputs. An attacker could possibly use this issue to perform an HTTP...

CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

CVE-2020-36309

The CVE-2020-36309 entry concerns ngx_http_lua_module (lua-nginx-module) in OpenResty, where unsafe characters in an argument used to mutate a URI or headers can be exploited. The issue affects the lua-nginx-module before 0.10.16 and is associated with potential HTTP request smuggling and related...

CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...