BIT-nginx-gateway-2024-32760

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/nginx-gateway/BIT-nginx-gateway-2024-32760.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-nginx-gateway-2024-32760

Aliases

Published

2025-12-03T11:44:25.577Z

Modified

2025-12-03T13:17:54.844080Z

Summary

NGINX HTTP/3 QUIC vulnerability

Details

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact.

Database specific

{
    "severity": "Medium",
    "cpes": [
        "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*"
    ]
}

References

Affected packages

Bitnami / nginx-gateway

Package

Name: nginx-gateway
Purl: pkg:bitnami/nginx-gateway

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

1.25.0

Fixed

1.26.1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/nginx-gateway/BIT-nginx-gateway-2024-32760.json"