CVE-2026-42223

Go/github.com/0xJacky/nginx-ui CVE-2026-42223: medium 6.5

Nginx-UI Settings API Exposes Protected Secrets

Action: Upgrade github.com/0xJacky/nginx-ui to 2.3.8 or later.

go get github.com/0xJacky/nginx-ui@v2.3.8

Affected

Fixed versions

Sources

• osv: GHSA-q4w7-56hr-83rm
• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-q4w7-56hr-83rm
• https://nvd.nist.gov/vuln/detail/CVE-2026-42223
• https://github.com/0xJacky/nginx-ui
• https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.8

CVE-2026-42223 · published 2026-05-06T17:01:04Z · modified 2026-06-25T23:11:35.961818136Z · JSON

Go/github.com/0xJacky/nginx-ui CVE-2026-42223: unknown

Nginx-UI Settings API Exposes Protected Secrets in github.com/0xJacky/nginx-ui

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5565
• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-q4w7-56hr-83rm
• https://nvd.nist.gov/vuln/detail/CVE-2026-42223
• https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.8

CVE-2026-42223 · published 2026-06-25T22:34:34Z · modified 2026-06-25T23:01:31.587658502Z · JSON