All issues

Search results

upstream_sticky: Set-Cookie assembly passes NULL cookie_path to memcpy

Status: Open.

#1678 In nginx/nginx;

· mreiden opened on Aug 21, 2026

resolver: signed overflow assembling A-record addresses from DNS responses (buf[i] << 24)

Status: Open.

#1676 In nginx/nginx;

· mreiden opened on Aug 21, 2026

proxy: URI-less proxy_pass passes NULL to memcpy when building the upstream request

Status: Open.

#1677 In nginx/nginx;

· mreiden opened on Aug 21, 2026

least_time: unclamped decay shift misranks long-idle peers (UB shift exponent)

Status: Open.

#1675 In nginx/nginx;

· mreiden opened on Aug 21, 2026

Prevent injecting CR, LF, or NUL into HTTP field values

enhancement

Status: Open.

#1673 In nginx/nginx;

· DemiMarie opened on Aug 21, 2026

UBSAN (nonnull) trap in ngx_sprintf_str() on every debug-logged request: %V passes NULL to memcpy for empty strings

bug

Status: Open.

#1671 In nginx/nginx;

· mreiden opened on Aug 21, 2026

HTTP3/QUIC Reload Implementation

Status: Open.

#1666 In nginx/nginx;

· sindhushiv opened on Aug 20, 2026

·  

nginx-1.31.6

Finalize the design for the HTTP3/QUIC reload

Status: Open.

#1665 In nginx/nginx;

· sindhushiv opened on Aug 20, 2026

·  

nginx-1.31.6

proxy_bind: support SO_BINDTODEVICE to bind by interface name

enhancement

refinedRefinement is complete. Scope, priority, approach, and next steps are clear for the implementation.Refinement is complete. Scope, priority, approach, and next steps are clear for the implementation.

small

Status: Open.

Enhancement

#1659 In nginx/nginx;

· ningxll opened on Aug 18, 2026

·  

nginx-1.31.7

resolve directive causes intermittent "no live upstreams" when DNS A record changes

bug

needs-refinementInitial analysis is complete, and the issue needs to be discussed in the refinement meeting.Initial analysis is complete, and the issue needs to be discussed in the refinement meeting.

Status: Open.

#1656 In nginx/nginx;

· bgrooot opened on Aug 18, 2026

mail smtp proxy: pass client greeting as-is.

enhancement

need more info

Status: Open.

#1652 In nginx/nginx;

· ARitz-Cracker opened on Aug 15, 2026

Upstreams created after configuration parsing are never wired for keepalive since 1.29.7

bug

Status: Open.

#1650 In nginx/nginx;

· liebman opened on Aug 14, 2026