CVE-2026-56434

High

Advisory

Published 15 Jul 2026In the index since 5 Sept 2026

NGINX ngx_http_ssi_module vulnerability

Carried by container images the latest versions of 103 of 17,781 indexed charts deploy, on 103 images.

Affected package	Affected versions	Fixed in	Images
nginxdeb	1.4.6-1ubuntu3.8ppa1, 1.18.0-0ubuntu1.2, 1.18.0-0ubuntu1.3, 1.18.0-0ubuntu1.4+30 more	1.18.0-6ubuntu14.17, 1.24.0-2ubuntu7.14, 1.26.3-3+deb13u8	82
nginxapk	1.26.2-r4, 1.26.3-r0, 1.28.0-r3, 1.28.1-r1+4 more	1.26.3-r2, 1.28.3-r6	14
nginxbitnami	1.25.5-0, 1.27.1-2, 1.28.0-0, 1.31.3-0	1.30.4	4
nginx-mainlineapk	1.27.4-r0, 1.27.4-r2, 1.29.8-r1	1.31.3-r0	3
NGINX Open Sourcebitnami	1.25.5-0	1.30.4	1

OSV records: ALPINE-CVE-2026-56434 BIT-nginx-2026-56434 CGA-35p6-397x-pf84 DEBIAN-CVE-2026-56434 UBUNTU-CVE-2026-56434
Also known as: BIT-nginx-gateway-2026-56434, CGA-cjff-ffmj-gw2w, USN-8563-1

103 by stars

Chart

Latest

Affected images

Radar Score

1 of the 1 container images this version deploys carry CVE-2026-56434.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nginx@1.20.1-1~focal	no fix listed

14,364

1 of the 3 container images this version deploys carry CVE-2026-56434.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nginx@1.20.1-1~focal	no fix listed

28,605

1 of the 2 container images this version deploys carry CVE-2026-56434.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	nginx@1.25.5-1~bookworm	no fix listed

7,673

103 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/zammad/zammad :7.1.3-0011	e65123a43ecc	nginx@1.26.3-3+deb13u7	1.26.3-3+deb13u8	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	nginx@1.27.2-1~bookworm	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	nginx@1.25.3-1~bookworm	no fix listed	1