[
  {
    "unique_content_id": "9c968129f10b424807b830f0219b8d4c",
    "aliases": [
      "CORE-2010-0121"
    ],
    "summary": "Vulnerabilities with Windows 8.3 filename pseudonyms",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": {
            "os": "windows"
          }
        },
        "fixed_version": "0.8.33",
        "affected_version_range": "vers:nginx/>=0.7.52|<=0.8.32"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": {
            "os": "windows"
          }
        },
        "fixed_version": "0.7.65",
        "affected_version_range": "vers:nginx/>=0.7.52|<=0.8.32"
      }
    ],
    "references": [],
    "date_published": null
  },
  {
    "unique_content_id": "b55c336a480792ece857368101645c0c",
    "aliases": [
      "CVE-2009-3896"
    ],
    "summary": "Null pointer dereference vulnerability",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.8.14",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.13"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.7.62",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.13"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.6.39",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.13"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.5.38",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.13"
      }
    ],
    "references": [
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3896",
        "severities": [],
        "reference_id": "CVE-2009-3896"
      },
      {
        "url": "https://nginx.org/download/patch.null.pointer.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.null.pointer.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "5df3f01df0d85143bc51ddbb453c1581",
    "aliases": [
      "CVE-2009-3898"
    ],
    "summary": "Directory traversal vulnerability",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.8.17",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.16"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.7.63",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.16"
      }
    ],
    "references": [
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3898",
        "severities": [],
        "reference_id": "CVE-2009-3898"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "480c77ca27341a47f11299017c7660b7",
    "aliases": [
      "CVE-2009-4487"
    ],
    "summary": "An error log data are not sanitized",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": null,
        "affected_version_range": "vers:nginx/*"
      }
    ],
    "references": [
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-4487",
        "severities": [],
        "reference_id": "CVE-2009-4487"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "20cecfba57d0a66b04e1b4b6fb4efb26",
    "aliases": [
      "CVE-2010-2263"
    ],
    "summary": "Vulnerabilities with Windows file default stream",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": {
            "os": "windows"
          }
        },
        "fixed_version": "0.8.40",
        "affected_version_range": "vers:nginx/>=0.7.52|<=0.8.39"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": {
            "os": "windows"
          }
        },
        "fixed_version": "0.7.66",
        "affected_version_range": "vers:nginx/>=0.7.52|<=0.8.39"
      }
    ],
    "references": [
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2263",
        "severities": [],
        "reference_id": "CVE-2010-2263"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "646911f1d2f21611b0a3720f3523b3b2",
    "aliases": [
      "CVE-2010-2266"
    ],
    "summary": "Vulnerabilities with invalid UTF-8 sequence on Windows",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": {
            "os": "windows"
          }
        },
        "fixed_version": "0.8.41",
        "affected_version_range": "vers:nginx/>=0.7.52|<=0.8.40"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": {
            "os": "windows"
          }
        },
        "fixed_version": "0.7.67",
        "affected_version_range": "vers:nginx/>=0.7.52|<=0.8.40"
      }
    ],
    "references": [
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2266",
        "severities": [],
        "reference_id": "CVE-2010-2266"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "56a7ea32d809aa1a3181ab87eea4fe43",
    "aliases": [
      "CVE-2011-4315"
    ],
    "summary": "Buffer overflow in resolver",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.1.8",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.1.7"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.0.10",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.1.7"
      }
    ],
    "references": [
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4315",
        "severities": [],
        "reference_id": "CVE-2011-4315"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "899ece25ddf860b11ce3408d7e1e8eed",
    "aliases": [
      "CVE-2011-4963"
    ],
    "summary": "Vulnerabilities with Windows directory aliases",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": {
            "os": "windows"
          }
        },
        "fixed_version": "1.3.1",
        "affected_version_range": "vers:nginx/>=0.7.52|<=1.3.0"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": {
            "os": "windows"
          }
        },
        "fixed_version": "1.2.1",
        "affected_version_range": "vers:nginx/>=0.7.52|<=1.3.0"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2012/000086.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4963",
        "severities": [],
        "reference_id": "CVE-2011-4963"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "aff5af1bcc53f6fa1a49917e044acf79",
    "aliases": [
      "CVE-2012-1180"
    ],
    "summary": "Memory disclosure with specially crafted backend responses",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.1.17",
        "affected_version_range": "vers:nginx/>=0.1.0|<=1.1.16"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.0.14",
        "affected_version_range": "vers:nginx/>=0.1.0|<=1.1.16"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2012/000076.html",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1180",
        "severities": [],
        "reference_id": "CVE-2012-1180"
      },
      {
        "url": "https://nginx.org/download/patch.2012.memory.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2012.memory.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "b0a336b612b378d72e93193756b3e376",
    "aliases": [
      "CVE-2012-2089"
    ],
    "summary": "Buffer overflow in the ngx_http_mp4_module",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.1.19",
        "affected_version_range": "vers:nginx/>=1.0.7|<=1.0.14|>=1.1.3|<=1.1.18"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.0.15",
        "affected_version_range": "vers:nginx/>=1.0.7|<=1.0.14|>=1.1.3|<=1.1.18"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2012/000080.html",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2089",
        "severities": [],
        "reference_id": "CVE-2012-2089"
      },
      {
        "url": "https://nginx.org/download/patch.2012.mp4.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2012.mp4.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "e35afe5b1aadcb66c5ad82c8894dff17",
    "aliases": [
      "CVE-2013-2028"
    ],
    "summary": "Stack-based buffer overflow with specially crafted request",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.5.0",
        "affected_version_range": "vers:nginx/>=1.3.9|<=1.4.0"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.4.1",
        "affected_version_range": "vers:nginx/>=1.3.9|<=1.4.0"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.html",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2028",
        "severities": [],
        "reference_id": "CVE-2013-2028"
      },
      {
        "url": "https://nginx.org/download/patch.2013.chunked.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2013.chunked.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "bf07c722836da87901a6a99186aa1451",
    "aliases": [
      "CVE-2013-2070"
    ],
    "summary": "Memory disclosure with specially crafted HTTP backend responses",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.5.0",
        "affected_version_range": "vers:nginx/>=1.1.4|<=1.2.8|>=1.3.9|<=1.4.0"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.4.1",
        "affected_version_range": "vers:nginx/>=1.1.4|<=1.2.8|>=1.3.9|<=1.4.0"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.2.9",
        "affected_version_range": "vers:nginx/>=1.1.4|<=1.2.8|>=1.3.9|<=1.4.0"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2013/000114.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2070",
        "severities": [],
        "reference_id": "CVE-2013-2070"
      },
      {
        "url": "https://nginx.org/download/patch.2013.chunked.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2013.chunked.txt.asc",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2013.proxy.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2013.proxy.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "233d69f66b16829cd2563a8d4544c4fc",
    "aliases": [
      "CVE-2013-4547"
    ],
    "summary": "Request line parsing vulnerability",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.5.7",
        "affected_version_range": "vers:nginx/>=0.8.41|<=1.5.6"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.4.4",
        "affected_version_range": "vers:nginx/>=0.8.41|<=1.5.6"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4547",
        "severities": [],
        "reference_id": "CVE-2013-4547"
      },
      {
        "url": "https://nginx.org/download/patch.2013.space.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2013.space.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "55dccce79c4247faa1ed8db0f8fbd44f",
    "aliases": [
      "CVE-2014-0088"
    ],
    "summary": "SPDY memory corruption",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.5.11",
        "affected_version_range": "vers:nginx/1.5.10"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2014/000132.html",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0088",
        "severities": [],
        "reference_id": "CVE-2014-0088"
      },
      {
        "url": "https://nginx.org/download/patch.2014.spdy.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2014.spdy.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "0c5952c29a54fdbc5526988c898e639d",
    "aliases": [
      "CVE-2014-0133"
    ],
    "summary": "SPDY heap buffer overflow",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.5.12",
        "affected_version_range": "vers:nginx/>=1.3.15|<=1.5.11"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.4.7",
        "affected_version_range": "vers:nginx/>=1.3.15|<=1.5.11"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2014/000135.html",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0133",
        "severities": [],
        "reference_id": "CVE-2014-0133"
      },
      {
        "url": "https://nginx.org/download/patch.2014.spdy2.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2014.spdy2.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "be04a26546034f1bf6dc81fe3f196d21",
    "aliases": [
      "CVE-2014-3556"
    ],
    "summary": "STARTTLS command injection",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.7.4",
        "affected_version_range": "vers:nginx/>=1.5.6|<=1.7.3"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.6.1",
        "affected_version_range": "vers:nginx/>=1.5.6|<=1.7.3"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2014/000144.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3556",
        "severities": [],
        "reference_id": "CVE-2014-3556"
      },
      {
        "url": "https://nginx.org/download/patch.2014.starttls.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2014.starttls.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "de51a68688d1254c7b923c4d553673d7",
    "aliases": [
      "CVE-2014-3616"
    ],
    "summary": "SSL session reuse vulnerability",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.7.5",
        "affected_version_range": "vers:nginx/>=0.5.6|<=1.7.4"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.6.2",
        "affected_version_range": "vers:nginx/>=0.5.6|<=1.7.4"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2014/000147.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3616",
        "severities": [],
        "reference_id": "CVE-2014-3616"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "cc7df0e8e72511288d97344b777f34ba",
    "aliases": [
      "CVE-2016-0742"
    ],
    "summary": "Invalid pointer dereference in resolver",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.9.10",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.9.9"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.8.1",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.9.9"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2016/000169.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0742",
        "severities": [],
        "reference_id": "CVE-2016-0742"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "3dd9fdd76b336623770856c554207c25",
    "aliases": [
      "CVE-2016-0746"
    ],
    "summary": "Use-after-free during CNAME response processing in resolver",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.9.10",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.9.9"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.8.1",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.9.9"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2016/000169.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0746",
        "severities": [],
        "reference_id": "CVE-2016-0746"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "efde3660cac695e0cf1a2641d85fc960",
    "aliases": [
      "CVE-2016-0747"
    ],
    "summary": "Insufficient limits of CNAME resolution in resolver",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.9.10",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.9.9"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.8.1",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.9.9"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2016/000169.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0747",
        "severities": [],
        "reference_id": "CVE-2016-0747"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "55c06fb39c2060ebd4286f059a2de757",
    "aliases": [
      "CVE-2016-4450"
    ],
    "summary": "NULL pointer dereference while writing client request body",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.11.1",
        "affected_version_range": "vers:nginx/>=1.3.9|<=1.11.0"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.10.1",
        "affected_version_range": "vers:nginx/>=1.3.9|<=1.11.0"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4450",
        "severities": [],
        "reference_id": "CVE-2016-4450"
      },
      {
        "url": "https://nginx.org/download/patch.2016.write.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2016.write.txt.asc",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2016.write2.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2016.write2.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "b228b252bfacba385255fa39b0ab8a24",
    "aliases": [
      "CVE-2017-7529"
    ],
    "summary": "Integer overflow in the range filter",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.13.3",
        "affected_version_range": "vers:nginx/>=0.5.6|<=1.13.2"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.12.1",
        "affected_version_range": "vers:nginx/>=0.5.6|<=1.13.2"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7529",
        "severities": [],
        "reference_id": "CVE-2017-7529"
      },
      {
        "url": "https://nginx.org/download/patch.2017.ranges.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2017.ranges.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "7dd33f5c92c595292d689401ae2e2e5e",
    "aliases": [
      "CVE-2018-16843"
    ],
    "summary": "Excessive memory usage in HTTP/2",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.15.6",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.15.5"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.14.1",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.15.5"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2018/000220.html",
        "severities": [
          {
            "value": "low",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16843",
        "severities": [],
        "reference_id": "CVE-2018-16843"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "3f512172cf08fbf37eed94073722c0d1",
    "aliases": [
      "CVE-2018-16844"
    ],
    "summary": "Excessive CPU usage in HTTP/2",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.15.6",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.15.5"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.14.1",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.15.5"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2018/000220.html",
        "severities": [
          {
            "value": "low",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16844",
        "severities": [],
        "reference_id": "CVE-2018-16844"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "65afa9db838c6440788e944c0c841e14",
    "aliases": [
      "CVE-2018-16845"
    ],
    "summary": "Memory disclosure in the ngx_http_mp4_module",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.15.6",
        "affected_version_range": "vers:nginx/>=1.0.7|<=1.0.15|>=1.1.3|<=1.15.5"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.14.1",
        "affected_version_range": "vers:nginx/>=1.0.7|<=1.0.15|>=1.1.3|<=1.15.5"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2018/000221.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16845",
        "severities": [],
        "reference_id": "CVE-2018-16845"
      },
      {
        "url": "https://nginx.org/download/patch.2018.mp4.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2018.mp4.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "836975e8910970e6adbef6643c714424",
    "aliases": [
      "CVE-2019-9511"
    ],
    "summary": "Excessive CPU usage in HTTP/2 with small window updates",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.17.3",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.17.2"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.16.1",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.17.2"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2019/000249.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
        "severities": [],
        "reference_id": "CVE-2019-9511"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "0ac8c5b8bbd51df34fcb6e027d5ea044",
    "aliases": [
      "CVE-2019-9513"
    ],
    "summary": "Excessive CPU usage in HTTP/2 with priority changes",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.17.3",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.17.2"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.16.1",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.17.2"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2019/000249.html",
        "severities": [
          {
            "value": "low",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
        "severities": [],
        "reference_id": "CVE-2019-9513"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "7d85553ab2c402dc0f68469d0789ec2c",
    "aliases": [
      "CVE-2019-9516"
    ],
    "summary": "Excessive memory usage in HTTP/2 with zero length headers",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.17.3",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.17.2"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.16.1",
        "affected_version_range": "vers:nginx/>=1.9.5|<=1.17.2"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2019/000249.html",
        "severities": [
          {
            "value": "low",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
        "severities": [],
        "reference_id": "CVE-2019-9516"
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "dd9de89fd19c456d6452c1fe591238f8",
    "aliases": [
      "CVE-2021-23017"
    ],
    "summary": "1-byte memory overwrite in resolver",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.21.0",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.20.0"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "1.20.1",
        "affected_version_range": "vers:nginx/>=0.6.18|<=1.20.0"
      }
    ],
    "references": [
      {
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2021/000300.html",
        "severities": [
          {
            "value": "medium",
            "system": "generic_textual"
          }
        ],
        "reference_id": ""
      },
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23017",
        "severities": [],
        "reference_id": "CVE-2021-23017"
      },
      {
        "url": "https://nginx.org/download/patch.2021.resolver.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.2021.resolver.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "34b7ff4154010452c4dd186b7cbbcc5d",
    "aliases": [
      "VU#120541",
      "CVE-2009-3555"
    ],
    "summary": "The renegotiation vulnerability in SSL protocol",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.8.23",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.22"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.7.64",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.22"
      }
    ],
    "references": [
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555",
        "severities": [],
        "reference_id": "CVE-2009-3555"
      },
      {
        "url": "https://nginx.org/download/patch.cve-2009-3555.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.cve-2009-3555.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  },
  {
    "unique_content_id": "cef6afb87317112ea248571bd6991994",
    "aliases": [
      "VU#180065",
      "CVE-2009-2629"
    ],
    "summary": "Buffer underflow vulnerability",
    "affected_packages": [
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.8.15",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.14"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.7.62",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.14"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.6.39",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.14"
      },
      {
        "package": {
          "name": "nginx",
          "type": "nginx",
          "subpath": null,
          "version": null,
          "namespace": null,
          "qualifiers": null
        },
        "fixed_version": "0.5.38",
        "affected_version_range": "vers:nginx/>=0.1.0|<=0.8.14"
      }
    ],
    "references": [
      {
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2629",
        "severities": [],
        "reference_id": "CVE-2009-2629"
      },
      {
        "url": "https://nginx.org/download/patch.180065.txt",
        "severities": [],
        "reference_id": ""
      },
      {
        "url": "https://nginx.org/download/patch.180065.txt.asc",
        "severities": [],
        "reference_id": ""
      }
    ],
    "date_published": null
  }
]