What’s Vulnerable › Products

lucasdillmann nginx-ignition vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your lucasdillmann nginx-ignition version is affected

Latest lucasdillmann nginx-ignition vulnerabilities

• CVE-2026-61630 — nginx ignition has TOTP Reuse During Validity Window (CVSS 4.2)
• CVE-2026-61629 — nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware (CVSS 7.5)
• CVE-2026-61628 — nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition (CVSS 8.1)