High 8.2 Unfixed
2026-03-24≤ 1.16.1
NGINX ngx_http_dav_module vulnerability
nginx 1.16
High 7.8 Unfixed
2026-03-24≤ 1.16.1
NGINX ngx_http_mp4_module vulnerability
High 7.8 Unfixed
2026-03-24≤ 1.16.1
NGINX ngx_http_mp4_module vulnerability
High 7.7 Unfixed
2021-06-01≤ 1.16.1
nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name
High 7.5 Unfixed
2026-03-24≤ 1.16.1
NGINX ngx_mail_auth_http_module vulnerability
KEV Unfixed
2023-10-10≤ 1.16.1
HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
High 7.5
2019-08-13< 1.16.1
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service
High 7.5
2019-08-13< 1.16.1
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service
High 7.4 Unfixed
2022-03-23≤ 1.16.1
ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
High 7.1 Unfixed
2022-10-19≤ 1.16.1
NGINX ngx_http_mp4_module vulnerability CVE-2022-41742
High 7.0 Unfixed
2022-10-19≤ 1.16.1
NGINX ngx_http_mp4_module vulnerability CVE-2022-41741
Medium 6.5
2019-08-13< 1.16.1
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service
Medium 5.9 Unfixed
2026-02-04≤ 1.16.1
NGINX vulnerability
Medium 5.3 Unfixed
2020-01-09≤ 1.16.1
nginx: HTTP request smuggling in configurations with URL redirect used as error_page
Medium 4.7 Unfixed
2024-08-14≤ 1.16.1
NGINX MP4 module vulnerability
Medium 4.3 Unfixed
2025-02-05≤ 1.16.1
TLS Session Resumption Vulnerability
Low 3.7 Unfixed
2026-03-24≤ 1.16.1
NGINX ngx_mail_proxy_module vulnerability
Low 3.7 Unfixed
2025-08-13≤ 1.16.1
NGINX ngx_mail_smtp_module vulnerability