release-1.30.4
Security 3
- Fixed buffer overflow vulnerability when using map with regex (CVE-2026-42533)
- Fixed memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005)
- Fixed use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434)
nginx-1.30.4 stable version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).
See official CHANGES-1.30 on nginx.org.
Below is a release summary generated by GitHub.
What's Changed
- Nginx 1.30.4 by @arut in https://github.com/nginx/nginx/pull/1563
Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.3...release-1.30.4