nginx-module-cache-purge -- symlink traversal when walking cache trees

The ngx_cache_purge developers report:

Fixed a symlink traversal vulnerability during cache tree traversal. An attacker with the ability to create symbolic links inside the cache directory could potentially cause cache purge operations to delete arbitrary files accessible to the NGINX worker process (CVE-2026-108981).

[source]