release-1.30.3
Security 2
- Fixed buffer overflow vulnerability in ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055)
- Fixed buffer overread vulnerability in ngx_http_charset_module (CVE-2026-48142)
nginx-1.30.3 stable version has been released, with fixes for buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142).
See official CHANGES-1.30 on nginx.org.
Below is a release summary generated by GitHub.
What's Changed
- Nginx 1.30.3 with security fixes by @arut in https://github.com/nginx/nginx/pull/1475
Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.2...release-1.30.3