this post was submitted on 14 May 2026

118 points (100.0% liked)

Selfhosted

selfhosted@lemmy.world

62,310 readers

5,790 active

491 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

moderators

ruud@lemmy.world

Loki@lemmy.world

CannaVet@lemmy.world

devve@lemmy.world

ayyy@sh.itjust.works

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE (thehackernews.com)

submitted 4 months ago* (last edited 4 months ago) by eager_eagle@lemmy.world to c/selfhosted@lemmy.world

15 comments fedilink hide all child comments

Update your nginx instances

cross-posted from: https://lemmy.world/post/46851448

Affected an non-affected versions https://nginx.org/en/security_advisories.html
CVE record https://www.cve.org/CVERecord?id=CVE-2026-42945
CVE details https://nvd.nist.gov/vuln/detail/CVE-2026-42945
PoC https://github.com/DepthFirstDisclosures/Nginx-Rift

CVE - Common Vulnerabilities and Exposures system
RCE - Remote Code Execution
PoC - Proof of Concept

you are viewing a single comment's thread
view the rest of the comments

[–] motruck@lemmy.zip 2 points 4 months ago (1 child)

Your friends should do a PoC before they rush to fix random bugs that ostensibly have a high severity.

parent

hideshow 1 child comment

[–] motruck@lemmy.zip 2 points 4 months ago

You should tell that on your group chat. Motruck says you need to slow down and stop jumping at high severity but low exploitabile trash.

parent