ngx_cache_purge vulnerabilities

CVEs whose affected-version data names the ngx_cache_purge package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-108981Low· 3.6

2w ago

ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account

ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account. The attacker must be able to create a symlink inside …

▾ Sunlitdenji · ngx_cache_purgeEPSS 0.16%via NVD