Safeguard
Tag

web-server-security

Safeguard articles tagged "web-server-security" — guides, analysis, and best practices for software supply chain and application security.

7 articles

Security

nginx 1.22.1 Vulnerabilities: What Actually Affects You

Worried about nginx 1.22.1 vulnerabilities? Here is what genuinely affects this release, what does not, and how to decide whether you need to upgrade.

Jun 15, 20265 min read
Vulnerabilities

Nginx Vulnerabilities: Tracking and Patching at Scale

Nginx vulnerabilities are rare compared to application-layer bugs but high-impact when they land — here's how to track disclosures and patch fleets without breaking uptime.

May 31, 20265 min read
Security

nginx 1.18.0 CVEs: Which Vulnerabilities Affect You and How to Patch

A look at the CVEs that affect nginx 1.18.0, why running an end-of-life stable branch is the real risk, and the safest path off it.

May 18, 20265 min read
Security

Is There an Nginx 1.18.0 Exploit? What the Known CVEs Actually Mean

Nginx 1.18.0 is an unmaintained stable release with real CVEs against it. Here is which flaws are genuinely exploitable, which need specific config, and how to upgrade.

May 2, 20265 min read
Security

Nginx 1.14.2: Which Vulnerabilities Affect It and How to Upgrade

Nginx/1.14.2 is an end-of-life release carrying the resolver heap overwrite, HTTP/2 DoS flaws, and a request-smuggling bug. Here is what applies and the upgrade path.

Mar 22, 20265 min read
Vulnerabilities

Nginx 1.20.1 Vulnerabilities: What to Patch

Nginx 1.20.1 fixed a real, exploitable DNS resolver bug — if you're still running an older 1.20.x or 1.19.x build, here's what the fix addressed and why it matters.

Feb 14, 20264 min read
Infrastructure Security

NGINX Security Configuration Guide for Production Deployments

NGINX powers a third of the internet. Its default configuration is optimized for getting started, not for production security. Here is the gap.

Jan 12, 20264 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

web-server-security — Safeguard Blog