UnratedFix available
nginx security updates
Fixed versions: 1.30.5, nginx-1.31.6. nginx 1.30.5 fixes a buffer overflow vulnerability in ngx_http_v3_module. nginx-1.31.6 fixes a buffer overflow vulnerability in ngx_http_v3_module.
- Products
- nginx
- Affected versions
- Not specified
- Fixed versions
- 1.30.5, nginx-1.31.6
- CVEs
- CVE-2026-90439
- Confirmed fixed CVEs
- CVE-2026-90439
- Updated in this feed
- 29 Oct 2026, 09:30 UTC · Revision 2
Source evidence
nginx-1.31.6 fixes a buffer overflow vulnerability in ngx_http_v3_module.
nginx-1.31.6 mainline version has been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439).
nginx
Fixed versions: nginx-1.31.6
Prerequisites: when using ngx_http_v3_module
Complete source record
{
"id": "6c24a9bfb2803ed5a7044b9ece42a22622f9c787b3d9968d50d5d1b08467a581",
"url": "https://github.com/nginx/nginx/releases/tag/release-1.31.6",
"method": "llm",
"payload": {
"kind": "patch",
"title": "nginx-1.31.6",
"summary": "nginx-1.31.6 fixes a buffer overflow vulnerability in ngx_http_v3_module.",
"evidence": "nginx-1.31.6 mainline version has been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439).",
"products": [
{
"name": {
"value": "nginx",
"evidence": "nginx-1.31.6 mainline version has been released"
},
"prerequisites": [
{
"value": "when using ngx_http_v3_module",
"evidence": "when using ngx_http_v3_module"
}
],
"fixed_versions": [
{
"value": "nginx-1.31.6",
"evidence": "nginx-1.31.6 mainline version has been released"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [
{
"cve": "CVE-2026-90439",
"product": "nginx",
"evidence": "nginx-1.31.6 mainline version has been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439)."
}
],
"related_cves": [
{
"value": "CVE-2026-90439",
"evidence": "CVE-2026-90439"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-nginx-nginx",
"document_id": 21870,
"published_at": "2026-09-15T15:34:19+00:00"
}nginx 1.30.5 fixes a buffer overflow vulnerability in ngx_http_v3_module.
nginx-1.30.5 stable version has been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439).
nginx
Fixed versions: 1.30.5
Prerequisites: when using ngx_http_v3_module
Complete source record
{
"id": "547cdfb1801a6a247e693c820d055dc97484dda79ea1623871149270a9bf66e0",
"url": "https://github.com/nginx/nginx/releases/tag/release-1.30.5",
"method": "llm",
"payload": {
"kind": "patch",
"title": "nginx-1.30.5",
"summary": "nginx 1.30.5 fixes a buffer overflow vulnerability in ngx_http_v3_module.",
"evidence": "nginx-1.30.5 stable version has been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439).",
"products": [
{
"name": {
"value": "nginx",
"evidence": "nginx-1.30.5 stable version has been released"
},
"prerequisites": [
{
"value": "when using ngx_http_v3_module",
"evidence": "when using ngx_http_v3_module"
}
],
"fixed_versions": [
{
"value": "1.30.5",
"evidence": "nginx-1.30.5 stable version has been released"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [
{
"cve": "CVE-2026-90439",
"product": "nginx",
"evidence": "nginx-1.30.5 stable version has been released, with fixes for buffer overflow vulnerability when using ngx_http_v3_module (CVE-2026-90439)."
}
],
"related_cves": [
{
"value": "CVE-2026-90439",
"evidence": "CVE-2026-90439"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-nginx-nginx",
"document_id": 21868,
"published_at": "2026-09-15T15:37:15+00:00"
}