Has anyone checked if Discourse containers are vulnerable to this rewrite vulnerability?

This is not a Discourse issue and topics regarding it should not be opened here.

We will update our base image our default rewrite rules are not vulnerable

This has now been completed. The base image now includes NGINX 1.30.1 : DEV: bump nginx to v1.30.1 (CVE-2026-42945) (#1054) main ← fitzy/bump-nginx merged 03:50AM - 18 May 26 UTC (UTC) …

Nginx CVE-2026-42945

Suporte

darkpixlz (Pyx ) 16 Maio , 2026 00:21 3

Isso não é um problema do Discourse e tópicos a respeito não devem ser abertos aqui.

Tópico		Respostas	Vistas
Management of NVTs and CVEs Self-hosting unsupported-install	7	1049	25 Julho , 2022
Upgrading failing with: The "before-server" Nginx outlet is missing... discourse_docker is not compatible with the chosen Discourse version Support	7	224	12 Julho , 2025
Nginx version pinning Bug	6	233	29 Janeiro , 2026
Docker installation vulnerable to CVE-2015-8126? Support	3	1058	18 Novembro , 2015
Nginx config in Discourse Docker? Self-hosting	3	3345	10 Fevereiro , 2022

Nginx CVE-2026-42945

Related topics