Security Advisories for github.com/0xJacky/nginx-ui in go
Critical
3 months ago
Nginx-UI is Vulnerable to Unauthenticated Remote Code Execution via Backup Restore
go
github.com/0xJacky/nginx-ui
Moderate
3 months ago
Nginx-UI Settings API Exposes Protected Secrets
go
github.com/0xJacky/nginx-ui
High
3 months ago
Nginx-UI: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover
go
github.com/0xJacky/nginx-ui
High
3 months ago
Nginx-UI: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim
go
github.com/0xJacky/Nginx-UI
Moderate
4 months ago
Nginx-UI: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback
go
github.com/0xJacky/Nginx-UI
High
4 months ago
Nginx-UI has Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware that Allows Access to Internal Services
go
github.com/0xJacky/Nginx-UI
High
4 months ago
Nginx-UI: Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints
go
github.com/0xJacky/Nginx-UI
High
4 months ago
Nginx-UI: Disabled users retain full API access through previously issued bearer tokens
go
github.com/0xJacky/Nginx-UI
Critical
5 months ago
nginx-ui's Unauthenticated MCP Endpoint Allows Remote Nginx Takeover
go
github.com/0xJacky/Nginx-UI
High
5 months ago
nginx-UI has Unencrypted Storage of DNS API Tokens and ACME Private Keys
go
github.com/0xJacky/nginx-ui
Moderate
5 months ago
nginx-ui Vulnerable to DoS via Negative Integer Input in Logrotate Interval
go
github.com/0xJacky/Nginx-UI
High
5 months ago
nginx-ui has Race Condition that Leads to Persistent Data Corruption and Service Collapse
go
github.com/uozi-tech/cosy, github.com/0xJacky/Nginx-UI
Moderate
5 months ago
Nginx Configuration Directory Vulnerable to Recursive Deletion via Improper Path Validation
go
github.com/0xJacky/Nginx-UI
Critical
5 months ago
nginx-ui Backup Restore Allows Tampering with Encrypted Backups
go
github.com/0xJacky/Nginx-UI
Critical
6 months ago
Nginx-UI Vulnerable to Unauthenticated Backup Download with Encryption Key Disclosure
go
github.com/0xJacky/Nginx-UI
High
over 2 years ago
Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF
go
github.com/0xJacky/Nginx-UI
Critical
over 2 years ago
Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature
go
github.com/0xJacky/Nginx-UI
High
over 2 years ago
Authenticated (user role) arbitrary command execution by modifying `start_cmd` setting (GHSL-2023-268)
go
github.com/0xJacky/Nginx-UI
High
over 2 years ago
Authenticated (user role) remote command execution by modifying `nginx` settings (GHSL-2023-269)
go
github.com/0xJacky/Nginx-UI
High
over 2 years ago
Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270)
go
github.com/0xJacky/Nginx-UI