3 matches found
CVE-2026-63177
What is affected: Malcolm (network traffic analysis tool suite). The issue is in the Nginx OpenResty Lua RBAC layer prior to v26.07.0, where RBAC evaluates the unnormalized ngx.var.request_uri while Nginx routes on the normalized path. Root cause: URI normalization mismatch allows a low-privilege...
7.1CVSS5.3AI score
SaveExploits0References2
CLSA-2022-1650377152 Fix CVE(s): CVE-2020-11724
SECURITY UPDATE: HTTP request smuggling in Lua module - debian/modules/nginx-lua: Fix parsing HTTP headers in the ngx.location.capture API porting an upstream patch 9ab38e8ee35fc08a57636b1b6190dca70b0076fa from https://github.com/openresty/lua-nginx-module - CVE-2020-11724...
7.5CVSS7.1AI score0.02528EPSS
SaveExploits0References1
20