CVE-2026-61630
2 advisories.
Go/github.com/lucasdillmann/nginx-ignition CVE-2026-61630: medium 4.2, EPSS 0.38%
nginx ignition has TOTP Reuse During Validity Window
Action: Upgrade github.com/lucasdillmann/nginx-ignition to 0.0.0-20260328015550-8d35e1eb5dd6 or later.
go get github.com/lucasdillmann/nginx-ignition@v0.0.0-20260328015550-8d35e1eb5dd6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20260217145239-1cbfae0296f1 | 0.0.0-20260328015550-8d35e1eb5dd6 | - |
Fixed versions
| 0.0.0-20260328015550-8d35e1eb5dd6 |
Sources
- osv: GHSA-hf33-q6cf-c66f
- https://github.com/lucasdillmann/nginx-ignition/security/advisories/GHSA-hf33-q6cf-c66f
- https://nvd.nist.gov/vuln/detail/CVE-2026-61630
- https://github.com/pquerna/otp/issues/61
- https://github.com/lucasdillmann/nginx-ignition/pull/104
- https://github.com/lucasdillmann/nginx-ignition/commit/1cbfae0296f1b186158f5a294ec484060e00102e
- https://github.com/lucasdillmann/nginx-ignition/commit/8d35e1eb5dd6a40fef94a45511fe08b0603af107
- https://github.com/lucasdillmann/nginx-ignition
- https://github.com/lucasdillmann/nginx-ignition/releases/tag/2.35.1
CVE-2026-61630 · published · modified · JSON
Go/github.com/lucasdillmann/nginx-ignition CVE-2026-61630: unknown, EPSS 0.38%
nginx ignition has TOTP Reuse During Validity Window in github.com/lucasdillmann/nginx-ignition
Action: Upgrade github.com/lucasdillmann/nginx-ignition to 0.0.0-20260328015550-8d35e1eb5dd6 or later.
go get github.com/lucasdillmann/nginx-ignition@v0.0.0-20260328015550-8d35e1eb5dd6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20260217145239-1cbfae0296f1 | 0.0.0-20260328015550-8d35e1eb5dd6 | - |
Fixed versions
| 0.0.0-20260328015550-8d35e1eb5dd6 |
Sources
- osv: GO-2026-6537
- https://github.com/lucasdillmann/nginx-ignition/security/advisories/GHSA-hf33-q6cf-c66f
- https://nvd.nist.gov/vuln/detail/CVE-2026-61630
- https://github.com/lucasdillmann/nginx-ignition/commit/1cbfae0296f1b186158f5a294ec484060e00102e
- https://github.com/lucasdillmann/nginx-ignition/commit/8d35e1eb5dd6a40fef94a45511fe08b0603af107
- https://github.com/lucasdillmann/nginx-ignition/pull/104
- https://github.com/lucasdillmann/nginx-ignition/releases/tag/2.35.1
- https://github.com/pquerna/otp/issues/61
CVE-2026-61630 · published · modified · JSON