Has anyone checked if Discourse containers are vulnerable to this rewrite vulnerability?

This is not a Discourse issue and topics regarding it should not be opened here.

We will update our base image our default rewrite rules are not vulnerable

This has now been completed. The base image now includes NGINX 1.30.1 : DEV: bump nginx to v1.30.1 (CVE-2026-42945) (#1054) main ← fitzy/bump-nginx merged 03:50AM - 18 May 26 UTC (UTC) …

Nginx CVE-2026-42945

Unterstützung

darkpixlz (Pyx ) 16. Mai 2026 um 00:21 3

Dies ist kein Discourse-Problem, und Themen dazu sollten hier nicht eröffnet werden.

Thema		Antworten	Aufrufe
Management of NVTs and CVEs Self-hosting unsupported-install	7	1073	25. Juli 2022
Upgrading failing with: The "before-server" Nginx outlet is missing... discourse_docker is not compatible with the chosen Discourse version Support	7	260	12. Juli 2025
Nginx version pinning Bug	6	263	29. Januar 2026
Docker installation vulnerable to CVE-2015-8126? Support	3	1072	18. November 2015
Nginx config in Discourse Docker? Self-hosting	3	3380	10. Februar 2022

Nginx CVE-2026-42945

Verwandte Themen