CVE-2026-9256
Named by 2 kept items in this workspace.
Search every workspace for CVE-2026-9256. It matches the name as written, so it can find other things that share it.
The items that name it 2
Heap buffer overflow in ngx_http_script.c: overlapping PCRE captures cause URI-escape overhead to be counted once during sizing but written twice. Function: ngx_http_script_regex_start_code(). Fixed in nginx 1.30.2 / 1.31.1 on May 22, 2026 (note: upgrading only to 1.30.1 leaves exposure to this CVE)
All cves in this workspace.