lucasdillmann nginx-ignition

• CVE-2026-61628 High 8.1 nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition 0.4%
• CVE-2026-61629 High 7.5 nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware 0.4%
• CVE-2026-61630 Medium 4.2 nginx ignition has TOTP Reuse During Validity Window 0.4%