Http3

Guides· DeploySmith · October 17, 2026

nginx 1.31.7 / 1.30.6: Five Security Fixes to Apply

Intermediate · 8 min read

Nginx Security Cve Reverse-Proxy Http3 Upgrade

nginx 1.31.7 (mainline) and 1.30.6 (stable) fix five medium-severity CVEs shipped 14 Oct 2026: alias+rewrite buffer overflow, script-expression overflow, HTTP/3 body injection, TLS session-ticket forgery, and an AIO/SSI use-after-free. How to tell which of your configs are in scope, and how to upgrade.…

Guides· DeploySmith · September 30, 2026

nginx 1.31.6: HTTP/3 Heap Overflow CVE-2026-90439

Intermediate · 10 min read

Nginx Security Http3 Quic Openssl Upgrade

nginx 1.31.6 (and 1.30.5) fix CVE-2026-90439, a heap buffer overflow in the HTTP/3 module that fires when running OpenSSL 3.5.0 and earlier. How to tell if your reverse proxy is affected, and how to upgrade.…