tocsin

Alpine/nginx: unknown

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limit

Action: Upgrade nginx to 1.30.1-r0 or later.

Affected

introducedfixedlast affected
01.30.1-r0-

Fixed versions

1.30.1-r0

Sources

published · modified · JSON