{"uuid": "ffbf3c32-3a4d-4033-955e-ac9a2637aa4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42945", "type": "seen", "source": "https://bsky.app/profile/thecascading.bsky.social/post/3mlrt43253u22", "content": "\ud83d\udd34 NGINX http_rewrite \u6a21\u5757\u6f0f\u6d1e\uff1b\u6216\u4f1a\u5bfc\u81f4\u5806\u6ea2\u51fa\u751a\u81f3\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u3002\n\n- \u6f0f\u6d1e\u7684\u8d77\u56e0\u662f nginx \u5c1d\u8bd5\u5c06 escape \u8fc7\u7684 URL \u5199\u5165\u672a escape \u957f\u5ea6\u7684\u5185\u5b58\u3002\n- \u5728 ASLR \u672a\u88ab\u5f00\u542f\u7684\u60c5\u51b5\u4e0b\uff0c\u53ef\u4ee5\u5bfc\u81f4\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u3002\n- \u4fee\u590d\u5df2\u4e8e 1.30.1/1.31.0 \u53d1\u5e03\u3002\n\n1. https://depthfirst.com/nginx-rift\n2. my.f5.com/~\n\nCVE: CVE-2026-42945\nCVSS: 9.2 (F5 Networks)\nAffect: [0.6.27, 1.30.0] ... [1/2]", "creation_timestamp": "2026-05-14T02:58:08.480955Z"}