Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-61628
  • github.com/lucasdillmann/nginx-ignition
 nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition 21 Sep
  • Fix available
  • Severity - 8.1 (High)
CVE-2026-61629
  • github.com/lucasdillmann/nginx-ignition
 nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware 21 Sep
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-61630
  • github.com/lucasdillmann/nginx-ignition
 nginx ignition has TOTP Reuse During Validity Window 21 Sep
  • Fix available
  • Severity - 4.2 (Medium)