{"id":"CLEANSTART-2026-MQ02912","summary":"Security fixes for CVE-2017-7529, CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-46461, CVE-2021-46462, CVE-2021-46463, CVE-2022-25139, CVE-2022-3638, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-7347, CVE-2025-23419 applied in versions: 0, 1.12.1-r0, 1.14.1-r0, 1.16.1-r0, 1.16.1-r6, 1.20.1-r0, 1.20.1-r1, 1.20.2-r2, 1.22.1-r0, 1.24.0-r12, 1.26.2-r0, 1.26.3-r0","details":"Multiple security vulnerabilities affect the nginx package. These issues are resolved in later releases. See references for individual vulnerability details.","modified":"2026-09-09T12:00:33.886380940Z","published":"2026-04-01T09:58:43.603060Z","withdrawn":"2026-09-09T10:55:12Z","upstream":["CVE-2017-7529","CVE-2018-16845","CVE-2019-20372","CVE-2019-9511","CVE-2019-9513","CVE-2019-9516","CVE-2021-23017","CVE-2021-46461","CVE-2021-46462","CVE-2021-46463","CVE-2022-25139","CVE-2022-3638","CVE-2022-41741","CVE-2022-41742","CVE-2023-44487","CVE-2024-31079","CVE-2024-32760","CVE-2024-34161","CVE-2024-35200","CVE-2024-7347","CVE-2025-23419"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MQ02912.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2017-7529"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2018-16845"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-20372"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9511"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9513"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2019-9516"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-23017"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-46461"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-46462"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2021-46463"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-25139"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-3638"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-41741"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-41742"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-44487"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-31079"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-32760"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-34161"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-35200"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2024-7347"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2025-23419"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7529"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16845"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20372"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9511"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9513"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9516"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23017"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46461"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46462"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46463"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25139"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3638"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41741"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41742"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31079"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32760"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34161"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35200"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7347"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23419"}],"affected":[{"package":{"name":"nginx","ecosystem":"CleanStart"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-r0"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MQ02912.json"}}],"schema_version":"1.9.0"}