denji
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ngx_cache_purge | 1 | – | Oct 12, 2026 |
Exploited and recent CVEs
- CVE-2026-108981 ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account. The attacker mus 0.2%