We advise users to run the most recent mainline or stable release of nginx.
Please report any vulnerabilities via one of the following methods (in order of preference):
-
Report a vulnerability within this repository. We are using the Github workflow that allows us to manage vulnerabilities in a private manner and to interact with reporters securely.
-
Report via email to security-alert@nginx.org. This method will be deprecated in the future.