Lucasdillmann Nginx-Ignition
2 CVEs affecting Lucasdillmann Nginx-Ignition. Latest disclosed: 2026-09-21. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-61628 | High | 8.1 | 2026-09-21 | nginx ignition is a user interface for the nginx web server. Prior to version 2.41.1, `POST /api/users/onboarding/finish` is registered as anonymous (unauthent… |
CVE-2026-61629 | High | 7.5 | 2026-09-21 | nginx ignition is a user interface for the nginx web server. In versions 2.29.0 through 2.40.0, the gin i18n middleware in nginx-ignition's API server runs in… |