{"action":"Upgrade nginx to 1.28.3-r0 or later.","affected":[{"fixed":"1.28.3-r0","introduced":"0"}],"component":"nginx","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.24","exploited":false,"fixed_versions":["1.28.3-r0"],"id":"tcs_01M5NFMH60P4BGDVWK4ZP6K1YM","modified_at":"2026-10-01T02:17:49.223726425Z","published_at":"2026-03-24T15:16:33.350Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2026-27784","https://security.alpinelinux.org/vuln/CVE-2026-27784"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2026-27784#Alpine:v3.24/nginx","url":"https://osv.dev/vulnerability/ALPINE-CVE-2026-27784"}],"summary":"The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its term"}