Approved changes feed: RSS · Atom

cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNginx (1886c50c-7b0f-5a0e-bad0-4811d6f30cfc)
ProductNginx (840af60c-8011-55e4-80ea-75dd6fc56ac0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nginx purl2cpe 2026-06-01 10:11:29.607053
pkg:deb/ubuntu/nginx purl2cpe 2026-06-01 10:11:29.607055
pkg:github/nginx/nginx purl2cpe 2026-06-01 10:11:29.607057
pkg:nginx/nginx purl2cpe 2026-06-01 10:11:29.607058
pkg:rpm/fedora/nginx purl2cpe 2026-06-01 10:11:29.607060
pkg:rpm/opensuse/nginx purl2cpe 2026-06-01 10:11:29.607061

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7529 vulnerable 2026-06-08 05:09:56.446236 Details available
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
Published: 2017-07-13T13:00:00.000Z
Updated: 2024-09-16T18:39:56.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4968 vulnerable 2026-06-08 04:59:34.114654 Details available
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
Published: 2019-11-19T15:18:17.000Z
Updated: 2024-08-07T00:23:39.358Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.