platform
nginx: security advisories, deprecations and releases
Web server, reverse proxy and load balancer.
Get nginx alerts Free. No account. One email, and only when something touches your
stack.
- Items, 90 days
- 2
- Critical
- 0
- Last critical
- none
- This week
- 1
What your digest would have held this week
1 item from the last 7 days. Zero sends only the ones that touch your stack.
Security 1
- HIGH tl;dr sec · 3 Oct 2026
CRLF-Powered Desync Attacks: Beheading HTTP Streams
PortSwigger and TurtleSec demonstrate how Nginx misconfiguration in proxy_pass enables CRLF injection leading to CL.TE desync worms and XSS propagation.
Releases 1
- INFO NEW THIS WEEK nginx news · 27 Oct 2026
nginx-1.31.8 mainline version released
nginx 1.31.8 mainline is now available for download.
Only hear about nginx when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.