tocsin

Alpine/nginx: unknown

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_file

Action: Upgrade nginx to 1.30.6-r0 or later.

Affected

introducedfixedlast affected
01.30.6-r0-

Fixed versions

1.30.6-r0

Sources

published · modified · JSON