Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-36309
5.3
MEDIUMCVSS v3
Published
April 6, 2021
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.
GitHub