Has anyone checked if Discourse containers are vulnerable to this rewrite vulnerability?

This is not a Discourse issue and topics regarding it should not be opened here.

We will update our base image our default rewrite rules are not vulnerable

This has now been completed. The base image now includes NGINX 1.30.1 : DEV: bump nginx to v1.30.1 (CVE-2026-42945) (#1054) main ← fitzy/bump-nginx merged 03:50AM - 18 May 26 UTC (UTC) …

Nginx CVE-2026-42945

Unterstützung

darkpixlz (Pyx ) 16. Mai 2026 um 00:21 3

Dies ist kein Discourse-Problem, und Themen dazu sollten hier nicht eröffnet werden.

Thema		Antworten	Aufrufe
Management of NVTs and CVEs Self-hosting unsupported-install	7	1044	25. Juli 2022
Upgrading failing with: The "before-server" Nginx outlet is missing... discourse_docker is not compatible with the chosen Discourse version Support	7	222	12. Juli 2025
Nginx version pinning Bug	6	220	29. Januar 2026
Docker installation vulnerable to CVE-2015-8126? Support	3	1058	18. November 2015
Nginx config in Discourse Docker? Self-hosting	3	3341	10. Februar 2022

Nginx CVE-2026-42945

Verwandte Themen