EUVD-2026-97159

ngxcachepurge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application e.g., WordPress run under the same user account. The attacker must be able to create a symlink inside the cache path. Version 3.0.4 fixes this for the case of a symli...

CVE-2026-108981

The ngx_cache_purge module in versions prior to 3.0.4 is vulnerable to a symlink attack that can lead to unintended file deletion. This occurs because the module follows symlinks while walking the cache directory tree using the ngx_walk_tree() function, which relies on stat(). The vulnerability i...