CVE-2026-40460— PGP public keys

nginx security advisories All nginx security issues should be reported via one of the methods listed here. Patches are signed using one of the PGP public keys. Buffer overflow when using map and regexSeverity: majorAdvisoryCVE-2026-42533Not vulnerable: 1.31.3+, 1.30.4+Vulnerable: 0.9.6-1.31.2 Memory disclosure when using ngx_http_slice_moduleSeverity: mediumAdvisoryCVE-2026-60005Not vulnerable: 1.31.3+, 1.30.4+Vulnerable: 1.15.8-1.31.2 Use-after-free when using ngx_http_ssi_moduleSeverity: mediumAdvisoryCVE-2026-56434Not vulnerable: 1.31.3+, 1.30.4+Vulnerable: 0.8.11-1.31.2 Use-after-free in HTTP/3Severity: majorAdvisoryCVE-2026-42530Not vulnerable: 1.31.2+Vulnerable: 1.31.0-1.31.1 Buffer overflow in the ngx_http_proxy_v2_module and ngx_http_grpc_moduleSeverity: mediumAdvisoryCVE-2026-42055Not vulnerable: 1.31.2+, 1.30.3+Vulnerable: 1.13.10-1.31.1 Buffer overread in the ngx_http_charset_moduleSeverity: lowAdvisoryCVE-2026-48142Not vulnerable: 1.31.2+, 1.30.3+Vulnerable: 0.3.50-1.31.1 Buffer overflow in the ngx_http_rewrite_moduleSeverity: mediumAdvisoryCVE-2026-9256Not vulnerable: 1.31.1+, 1.30.2+Vulnerable: 0.1.17-1.31.0 HTTP/2 request injection in the ngx_http_proxy_moduleSeverity: mediumAdvisoryCVE-2026-42926Not vulnerable: 1.31.0+, 1.30.1+Vulnerable: 1.29.4-1.30.0 Buffer overflow in the ngx_http_rewrite_moduleSeverity: mediumAdvisoryCVE-2026-42945Not vulnerable: 1.31.0+, 1.30.1+Vulnerable: 0.6.27-1.30.0 Buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_moduleSeverity: mediumAdvisoryCVE-2026-42946Not vulnerable: 1.31.0+, 1.30.1+Vulnerable: 0.8.42-1.30.0 Buffer overread in the ngx_http_charset_moduleSeverity: lowAdvisoryCVE-2026-42934Not vulnerable: 1.31.0+, 1.30.1+Vulnerable: 0.3.50-1.30.0 HTTP/3 address spoofingSeverity: mediumAdvisoryCVE-2026-40460Not