Skip to content

v1.0.1 – NGINX security stack update

Choose a tag to compare

View all tags
@Allyda Allyda released this 20 Jul 16:20
· 1 commit to main since this release
v1.0.1
3c964b4

Security update

  • Update NGINX from 1.29.4 to 1.31.3, fixing CVE-2026-42533.
  • Pin ModSecurity v3.0.16 and ModSecurity-nginx v1.0.4.
  • Pin OWASP Core Rule Set v4.28.0.
  • Use HTTPS for the NGINX source download.

Maintenance

  • Keep the ModSecurity audit storage root during cleanup.
  • Remove the obsolete Docker Compose version declaration.

Validation

  • Docker image builds successfully.
  • nginx -t passes.
  • Normal HTTP request returns 200.
  • XSS payload is blocked with 403.
Assets 2
Loading