# Nginx Proxy Manager v2.15.0 - Product: Nginx Proxy Manager (https://whatsnew.fyi/product/nginx-proxy-manager) - Vendor: Jamie Curnow - Date: 2026-05-31 - Version: v2.15.0 - Original notes: https://github.com/NginxProxyManager/nginx-proxy-manager/releases/tag/v2.15.0 - Permalink: https://whatsnew.fyi/product/nginx-proxy-manager/releases/v2.15.0 - Labels: Platforms: Linux What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **security** — Updated OpenResty to address CVE-2026-42945, CVE-2026-8711, and CVE-2026-9256 - **fixed** — Fix SQLite issue with NOW() - **changed** — Regenerate configs improvements - **changed** — Lots of Node dependency updates - **fixed** — Fix incorrect HTML description - **changed** — Various Cypress improvements - **fixed** — Fix silent nginx config corruption in 50-ipv6.sh - **added** — Add PUT and DELETE methods to Access-Control-Allow-Methods field - **added** — Add column sorting to Nginx tables - **security** — Fix Nginx Proxy Manager allowing any authenticated user to modify their own roles field through the PUT request - **fixed** — Fix translation in streams table ignoring current enable/disable state - **added** — Add SECURITY.md for security policy and reporting - **fixed** — Fix Undefined Variable next Referenced in Route Error Handler - **fixed** — Fix grammar and clarity issues in README.md - **changed** — Access list clients ordered insert - **added** — Add hoster.by certbot plugin - **added** — Add RcodeZero certbot plugin - **changed** — Update deSec certbot plugin - **added** — Add Hostinger certbot plugin - **changed** — Update EuroDNS certbot plugin - **fixed** — Omit Access rules directives if no rules configured - **added** — Add Norwegian locale - **added** — Add Estonian locale - **changed** — Update Russian locale - **changed** — Update Irish locale - **changed** — Update French locale - **changed** — Update Dutch locale - **added** — Add host info to proxy host delete confirmation modal - **changed** — Certbot DNS plugin installs are tested in CI

> [!WARNING] > Major update: Debian Trixie base image, OpenResty, Certbot and Python have been updated. Exercise caution with this upgrade as your DNS plugins may not work as expected and require tweaks to dependencies. See the new [Certbot Doc](https://nginxproxymanager.com/certbot/) for more info. ##### Changes - Updated OpenResty to address CVE-2026-42945 / CVE-2026-8711 / CVE-2026-9256 - Certbot DNS plugin installs are tested in CI now; but usage of them for requesting certs is not - Fix SQLLite issue with NOW() - Regenerate configs improvements - Lots of Node dep updates - Fix incorrect html description - Various Cypress improvements - Fix silent nginx config corruption in 50-ipv6.sh (thanks @bill-mahoney) - Added PUT and DELETE method to Access-Control-Allow-Methods field (thanks @MBulli) - Adds column sorting to Nginx tables (thanks @clementfavre) - fix Nginx Proxy Manager allows any authenticated user to modify their own roles field through the PUT (thanks @Zoey2936) - Fix translation in streams table ignoring current enable/disable state (thanks @tomas-bara) - Add SECURITY.md for security policy and reporting (thanks @jcarvajalantigua) - Fix Undefined Variable next Referenced in Route Error Handler (thanks @barttran2k) - Fix grammar and clarity issues in README.md (thanks @Arihant101) - Access list clients ordered insert (thanks @edklesel) - Docs: Fix PostgreSQL volume mapping to prevent data loss (thanks @fankes) - Docs: add NPM Auth Gateway to third-party integrations (thanks @Mark0025) - Docs: add selfhosting.sh guide to third-party list (thanks @roundone) - Adds host info to proxy host delete confirmation modal (thanks @clementfavre) - fix: omit "Access rules" directives if no rules configured (thanks @Matthew-Kilpatrick) - Add hoster.by certbot plugin (thanks @butalex11) - Add RcodeZero certbot plugin (thanks @Ludo-code) - Updated deSec certbot plugin (thanks @MichaelJanssenNesai) - Add Hostinger certbot plugin (thanks @rfos) - Updated EuroDNS certbot plugin (thanks @DaanSelen) - 🇳🇴 Add Norwegian locale (thanks @biodland) - 🇪🇪 Add Estonia locale (thanks @siimaarmaa) - 🇷🇺 Updated Russian locale (thanks @kraineff) - 🇮🇪 Updated Irish locale (thanks @eren-karakus0) - 🇫🇷 Updated French locale (thanks @Flop2691) - 🇫🇷 Updated French locale (thanks @MarioGervais) - 🇳🇱 Updated Dutch locale (thanks @Stephan-P) ##### Docker images - [jc21/nginx-proxy-manager:latest](https://hub.docker.com/layers/jc21/nginx-proxy-manager/latest/images/sha256-dd5c130caff2ec3bd9c8dfa6aff54cef3be5d9119f42c5e154f4ba916a26c7c1) - [jc21/nginx-proxy-manager:2](https://hub.docker.com/layers/jc21/nginx-proxy-manager/2/images/sha256-dd5c130caff2ec3bd9c8dfa6aff54cef3be5d9119f42c5e154f4ba916a26c7c1) - [jc21/nginx-proxy-manager:2.15.0](https://hub.docker.com/layers/jc21/nginx-proxy-manager/2.15.0/images/sha256-dd5c130caff2ec3bd9c8dfa6aff54cef3be5d9119f42c5e154f4ba916a26c7c1)