Approved changes feed: RSS · Atom

cpe:2.3:a:openresty:lua-nginx-module:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenresty (87c1b39d-c7a5-5234-9d7d-37a6949a9dfc)
ProductLua Nginx Module (13395d84-38f6-5dff-ae43-4bcb787b6b03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/openresty/lua-nginx-module purl2cpe 2026-06-01 10:17:54.647293

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-33452 vulnerable 2026-06-08 06:37:31.164574 Details available
An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-11-03T19:29:49.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36309 vulnerable 2026-06-08 05:25:02.941488 Details available
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.
Published: 2021-04-06T17:32:45.000Z
Updated: 2025-11-03T19:25:36.582Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.