{"id":"GO-2026-6734","summary":"Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage in github.com/0xJacky/Nginx-UI","details":"Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage in github.com/0xJacky/Nginx-UI","aliases":["CVE-2026-107805","GHSA-j3hg-9rp3-5hw9"],"modified":"2026-10-19T21:31:52.823715419Z","published":"2026-10-19T21:08:26Z","database_specific":{"url":"https://pkg.go.dev/vuln/GO-2026-6734","review_status":"UNREVIEWED"},"references":[{"type":"ADVISORY","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-j3hg-9rp3-5hw9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107805"},{"type":"WEB","url":"https://github.com/0xJacky/nginx-ui/commit/8c9b9a1aff218ee6c980d047b750e49da3c46796"},{"type":"WEB","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.6.0"}],"affected":[{"package":{"name":"github.com/0xJacky/Nginx-UI","ecosystem":"Go","purl":"pkg:golang/github.com/0xJacky/Nginx-UI"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20260729084040-acb59fdd81db"},{"fixed":"1.9.10-0.20260901043436-8c9b9a1aff21"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-6734.json"}}],"schema_version":"1.9.0"}