denji ngx_cache_purge

• CVE-2026-108981 Low 3.6 ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account. The attacker mus 0.2%