nginx 1.31.6: HTTP/3 Heap Overflow CVE-2026-90439
nginx 1.31.6 (and 1.30.5) fix CVE-2026-90439, a heap buffer overflow in the HTTP/3 module that fires when running OpenSSL 3.5.0 and earlier. How to tell if your reverse proxy is affected, and how to upgrade.…
Read more →