nginx

Developer Tools

HTTP and reverse proxy server, mail proxy, and TCP/UDP proxy.

Latest release-1.31.3 · by F5Websitenginx/nginx

Release activity

Release activity — 10 releases across 6 days since Apr 7, 2026. Each cell is one day; darker means more releases that day. Nothing is recorded before Apr 7, 2026. Older weeks are hidden at this screen width.
MayJunJulAug
SundayNo releases on Apr 19, 2026No releases on Apr 26, 2026No releases on May 3, 2026No releases on May 10, 2026No releases on May 17, 2026No releases on May 24, 2026No releases on May 31, 2026No releases on Jun 7, 2026No releases on Jun 14, 2026No releases on Jun 21, 2026No releases on Jun 28, 2026No releases on Jul 5, 2026No releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026
MondayNo releases on Apr 20, 2026No releases on Apr 27, 2026No releases on May 4, 2026No releases on May 11, 2026No releases on May 18, 2026No releases on May 25, 2026No releases on Jun 1, 2026No releases on Jun 8, 2026No releases on Jun 15, 2026No releases on Jun 22, 2026No releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 2026No releases on Aug 3, 2026
TuesdayNo releases on Apr 21, 2026No releases on Apr 28, 2026No releases on May 5, 2026No releases on May 12, 2026No releases on May 19, 2026No releases on May 26, 2026No releases on Jun 2, 2026No releases on Jun 9, 2026No releases on Jun 16, 2026No releases on Jun 23, 2026No releases on Jun 30, 2026No releases on Jul 7, 2026No releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 2026No releases on Aug 4, 2026
WednesdayNo releases on Apr 22, 2026No releases on Apr 29, 2026No releases on May 6, 20262 releases on May 13, 2026No releases on May 20, 2026No releases on May 27, 2026No releases on Jun 3, 2026No releases on Jun 10, 20262 releases on Jun 17, 2026No releases on Jun 24, 2026No releases on Jul 1, 2026No releases on Jul 8, 20262 releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026
ThursdayNo releases on Apr 23, 2026No releases on Apr 30, 2026No releases on May 7, 2026No releases on May 14, 2026No releases on May 21, 2026No releases on May 28, 2026No releases on Jun 4, 2026No releases on Jun 11, 2026No releases on Jun 18, 2026No releases on Jun 25, 2026No releases on Jul 2, 2026No releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 2026
FridayNo releases on Apr 24, 2026No releases on May 1, 2026No releases on May 8, 2026No releases on May 15, 20262 releases on May 22, 2026No releases on May 29, 2026No releases on Jun 5, 2026No releases on Jun 12, 2026No releases on Jun 19, 2026No releases on Jun 26, 2026No releases on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 2026
SaturdayNo releases on Apr 25, 2026No releases on May 2, 2026No releases on May 9, 2026No releases on May 16, 2026No releases on May 23, 2026No releases on May 30, 2026No releases on Jun 6, 2026No releases on Jun 13, 2026No releases on Jun 20, 2026No releases on Jun 27, 2026No releases on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026

10 releases since Apr 7, 2026, busiest day 2

Changelog

release-1.31.3

Changed 6
  • Set cache line size for loongarch64 in configure
  • Disable charset_map with utf-8 in the first column
  • Improve upstream header processing
  • Disable loading of external entities by default in xslt module
  • Add rcvbuf and sndbuf directives for upstream sockets in stream and HTTP
  • Improve tunnel body handling
Fixed 6
  • Fix overlapping memcpy in HTTP/2 CONTINUATION frames
  • Add missing bounds check in ngx_http_compile_complex_value() and ngx_stream_compile_complex_value()
  • Fix IPV6_DONTFRAG socket option setting
  • Fix memory leak in ngx_ssl_get_ech_outer_server_name()
  • Reject HTTP/2 requests with pseudo-headers after headers
  • Include crypt.h for crypt() feature tests in configure
Security 3
  • Fix buffer overflow vulnerability when using map with regex (CVE-2026-42533)
  • Fix memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005)
  • Fix use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434)

nginx-1.31.3 mainline version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed
New Contributors

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.2...release-1.31.3

View originalPermalink
How release-1.31.3 went

release-1.30.4

Security 3
  • Fixed buffer overflow vulnerability when using map with regex (CVE-2026-42533)
  • Fixed memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005)
  • Fixed use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434)

nginx-1.30.4 stable version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).

See official CHANGES-1.30 on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.3...release-1.30.4

View originalPermalink
How release-1.30.4 went

release-1.30.3

Security 2
  • Fixed buffer overflow vulnerability in ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055)
  • Fixed buffer overread vulnerability in ngx_http_charset_module (CVE-2026-48142)

nginx-1.30.3 stable version has been released, with fixes for buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142).

See official CHANGES-1.30 on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.2...release-1.30.3

View originalPermalink
How release-1.30.3 went

release-1.31.2

Added 1
  • Add $ssl_sigalgs variable
Changed 4
  • Use SipHash to speed up $request_id generation
  • Improve calculation of range boundaries in split clients
  • Compare hashes in constant time in secure link
  • Update OpenSSL used for win32 builds
Fixed 2
  • Fix handle vsnprintf return value in Xslt
  • Fix request_length format length in access log
Security 3
  • Fix use-after-free vulnerability in the ngx_http_v3_module (CVE-2026-42530)
  • Fix buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055)
  • Fix buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142)

nginx-1.31.2 mainline version has been released, with fixes for use-after-free vulnerability in the ngx_http_v3_module (CVE-2026-42530), buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142).

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed
New Contributors

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.1...release-1.31.2

View originalPermalink
How release-1.31.2 went

release-1.30.2

Security 1
  • Fix buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256)

nginx-1.30.2 stable version has been released, with a fix for buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256).

See official CHANGES-1.30 on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.1...release-1.30.2

View originalPermalink
How release-1.30.2 went

release-1.31.1

Changed 2
  • Limit Content-Type and Location response header length in HTTP/2
  • Harden escape flags control in rewrite module
Fixed 3
  • Avoid adding or comparing to null pointer in mp4 module
  • Fix mail error path handling
  • Fix buffer overflow with overlapping captures in rewrite module
Security 1
  • Fix buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256)

nginx-1.31.1 mainline version has been released, with a fix for buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256).

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.0...release-1.31.1

View originalPermalink
How release-1.31.1 went

release-1.30.1

Security 6
  • Fixed HTTP/2 request injection vulnerability in the ngx_http_proxy_module
  • Fixed buffer overflow vulnerability in the ngx_http_rewrite_module
  • Fixed buffer overread vulnerabilities in the ngx_http_scgi_module and ngx_http_uwsgi_module
  • Fixed buffer overread vulnerability in the ngx_http_charset_module
  • Fixed address spoofing vulnerability in HTTP/3
  • Fixed use-after-free vulnerability in OCSP requests to resolver

nginx-1.30.1 stable version has been released with fixes for HTTP/2 request injection vulnerability in the ngx_http_proxy_module (CVE-2026-42926), buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread vulnerabilities in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-42934), address spoofing vulnerability in HTTP/3 (CVE-2026-40460), and use-after-free vulnerability in OCSP requests to resolver (CVE-2026-40701).

See official CHANGES-1.30 on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.0...release-1.30.1

View originalPermalink
How release-1.30.1 went

release-1.31.0

Added 3
  • Add support for HTTP forward proxy
  • Add least_time load-balancing method
  • Add ALPN support for stream proxy_ssl upstream
Changed 6
  • Restrict duplicate TE headers in HTTP/2 and HTTP/3
  • Optimize HTTP/3 encoder stream memory usage
  • Improve path validation for DAV COPY and MOVE operations
  • Evaluate stream proxy_ssl_alpn once
  • Fix SSL logging level for SSL_R_RECORD_LAYER_FAILURE
  • Add synonym for upstream sticky module configure option
Fixed 5
  • Fix empty body buffering special case in request body handling
  • Fix keepalive for HTTP/2 proxy when no body is specified
  • Fix gcc version detection in configure in some corner cases
  • Reject HTTP CONNECT method with no port after colon
  • Prevent undefined behaviour in memcpy via ngx_init_cycle
Security 6
  • Fix HTTP/2 request injection vulnerability in ngx_http_proxy_module (CVE-2026-42926)
  • Fix buffer overflow vulnerability in ngx_http_rewrite_module (CVE-2026-42945)
  • Fix buffer overread vulnerabilities in ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946)
  • Fix buffer overread vulnerability in ngx_http_charset_module (CVE-2026-42934)
  • Fix address spoofing vulnerability in HTTP/3 (CVE-2026-40460)
  • Fix use-after-free vulnerability in OCSP requests to resolver (CVE-2026-40701)

nginx-1.31.0 mainline version has been released with fixes for HTTP/2 request injection vulnerability in the ngx_http_proxy_module (CVE-2026-42926), buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread vulnerabilities in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-42934), address spoofing vulnerability in HTTP/3 (CVE-2026-40460), and use-after-free vulnerability in OCSP requests to resolver (CVE-2026-40701). Additionally, the release features support for HTTP forward proxy and least_time load-balancing method.

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed
New Contributors

Full Changelog: https://github.com/nginx/nginx/compare/release-1.29.8...release-1.31.0

View originalPermalink
How release-1.31.0 went

release-1.30.0

nginx-1.30.0 stable version has been released, incorporating new features and bug fixes from the 1.29.x mainline branch — including Early Hints, HTTP/2 to backend and Encrypted ClientHello, sticky sessions support for upstreams, Multipath TCP support, the default proxy HTTP version set to HTTP/1.1 with keep-alive enabled, and more.

What's Changed
New Contributors

Full Changelog: https://github.com/nginx/nginx/compare/release-1.28.3...release-1.30.0

View originalPermalink
How release-1.30.0 went

release-1.29.8

nginx-1.29.8 mainline version has been released.

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed
New Contributors

Full Changelog: https://github.com/nginx/nginx/compare/release-1.29.7...release-1.29.8

View originalPermalink
How release-1.29.8 went
View all

Discussion