Alpine/nginx: critical 9.8
NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invokin
Action: Upgrade nginx to 1.30.2-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.30.2-r1 | - |
Fixed versions
| 1.30.2-r1 |
Sources
published · modified · JSON