nginx-1.31.3

{
  "id": "22f32b09c2ec6974c049df582172e5ae34619884d7e8eecd3477bd374c9c53e6",
  "url": "https://github.com/nginx/nginx/releases/tag/release-1.31.3",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "nginx-1.31.3",
    "summary": "The nginx 1.31.3 mainline release fixes three reported security vulnerabilities involving regex maps, the slice module, and the SSI module.",
    "evidence": "nginx-1.31.3 mainline version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).",
    "products": [
      {
        "name": {
          "value": "nginx",
          "evidence": "nginx-1.31.3 mainline version has been released"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "1.31.3",
            "evidence": "nginx-1.31.3 mainline version has been released"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [
      {
        "cve": "CVE-2026-42533",
        "product": "nginx",
        "evidence": "nginx-1.31.3 mainline version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533)"
      },
      {
        "cve": "CVE-2026-60005",
        "product": "nginx",
        "evidence": "nginx-1.31.3 mainline version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005)"
      },
      {
        "cve": "CVE-2026-56434",
        "product": "nginx",
        "evidence": "nginx-1.31.3 mainline version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434)"
      }
    ],
    "related_cves": [
      {
        "value": "CVE-2026-42533",
        "evidence": "buffer overflow vulnerability when using map with regex (CVE-2026-42533)"
      },
      {
        "value": "CVE-2026-60005",
        "evidence": "memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005)"
      },
      {
        "value": "CVE-2026-56434",
        "evidence": "use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434)"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-nginx-nginx",
  "document_id": 21872,
  "published_at": "2026-07-15T18:00:58+00:00"
}