FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

nginx -- multiple vulnerabilities

Affected packages
	nginx	<	1.30.4,3
	nginx-devel	<	1.31.3

Details

VuXML ID	56feeac6-8263-11f1-92ba-bc24110523fe
Discovery	2026-07-15
Entry	2026-07-18

The nginx development team reports:

Buffer overflow when using map and regex (CVE-2026-42533). Severity: major.

Memory disclosure when using ngx_http_slice_module (CVE-2026-60005). Severity: medium.

Use-after-free when using ngx_http_ssi_module (CVE-2026-56434). Severity: medium.

[source]

References

CVE Name	CVE-2026-42533
CVE Name	CVE-2026-56434
CVE Name	CVE-2026-60005
URL	https://nginx.org/en/security_advisories.html