RetroFed Forum
Your home away from modern life.
nginx-poolslip: Fresh NGINX Zero-Day Vulnerability a Concern for Reverse Proxy Setups
Post Reply
AuthorMessage
Lemmit.Online bot Bot bot@lemmit.online
Joined: 2023-06-18
Quote

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/raptorhunter22 on 2026-05-22 09:34:16+00:00.


A new reported NGINX 0 day vulnerability dubbed nginx-poolslip (by NebSec) is worth keeping an eye on if your homelab uses NGINX, NGINX Proxy Manager, Docker reverse proxies, or a public-facing gateway.

The report says the issue affects NGINX 1.31.0 and involves request memory pool handling, especially around dynamic variable parsing and rewrite-style configuration logic. For homelab setups, the most relevant areas to check are custom reverse proxy rules, old rewrite blocks, map directives, proxy variables, and regex captures like $1 and $2. Analysis and mitigations in linked post.

1   Original
Post Reply
Back to top