Visit Website →

Recent Items

CVE-2024-31079 — NGINX HTTP/3 QUIC vulnerability

Affected: F5 NGINX Open Source, F5 NGINX Plus, f5 nginx_plus, f5 nginx

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate or cause other potential impact. This attack requires that a request be specifically timed during the connection draining process, which the attacker has no visibility and limited influence over.

Updated on 2026-10-13T13:51:00.779568+00:00