Has anyone checked if Discourse containers are vulnerable to this rewrite vulnerability?

This is not a Discourse issue and topics regarding it should not be opened here.

We will update our base image our default rewrite rules are not vulnerable

This has now been completed. The base image now includes NGINX 1.30.1 : DEV: bump nginx to v1.30.1 (CVE-2026-42945) (#1054) main ← fitzy/bump-nginx merged 03:50AM - 18 May 26 UTC (UTC) …

Nginx CVE-2026-42945

Unterstützung

sam (Sam Saffron) 16. Mai 2026 um 02:26 5

Wir werden unser Basis-Image aktualisieren; unsere Standard-Umschreibungsregeln sind nicht anfällig.

Thema		Antworten	Aufrufe
Management of NVTs and CVEs Self-hosting unsupported-install	7	1041	25. Juli 2022
Upgrading failing with: The "before-server" Nginx outlet is missing... discourse_docker is not compatible with the chosen Discourse version Support	7	215	12. Juli 2025
Nginx version pinning Bug	6	206	29. Januar 2026
Docker installation vulnerable to CVE-2015-8126? Support	3	1052	18. November 2015
Nginx config in Discourse Docker? Self-hosting	3	3337	10. Februar 2022

Nginx CVE-2026-42945

Verwandte Themen