All vulnerabilities

Servers and applications

GHSA-q825-59pv-rpxw

Authenticated MCP request buffering lacked a body limit before v2.6.0

Severity
Medium 6.5
Published
22 Oct 2026
Last changed
22 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
2.6.0
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Nginx UIServers and applications · github:0xjacky/nginx-ui
  • From 2.4.1 before 2.6.0

References