Safeguard
Tag

web-server-security

Safeguard articles tagged "web-server-security" — guides, analysis, and best practices for software supply chain and application security.

7 articles

Security

nginx 1.22.1 Vulnerabilities: What Actually Affects You

Worried about nginx 1.22.1 vulnerabilities? Here is what genuinely affects this release, what does not, and how to decide whether you need to upgrade.

Sep 9, 20255 min read
Vulnerabilities

Nginx Vulnerabilities: Tracking and Patching at Scale

Nginx vulnerabilities are rare compared to application-layer bugs but high-impact when they land — here's how to track disclosures and patch fleets without breaking uptime.

Aug 6, 20255 min read
Security

nginx 1.18.0 CVEs: Which Vulnerabilities Affect You and How to Patch

A look at the CVEs that affect nginx 1.18.0, why running an end-of-life stable branch is the real risk, and the safest path off it.

Jul 2, 20255 min read
Security

Is There an Nginx 1.18.0 Exploit? What the Known CVEs Actually Mean

Nginx 1.18.0 is an unmaintained stable release with real CVEs against it. Here is which flaws are genuinely exploitable, which need specific config, and how to upgrade.

May 27, 20255 min read
Security

Nginx 1.14.2: Which Vulnerabilities Affect It and How to Upgrade

Nginx/1.14.2 is an end-of-life release carrying the resolver heap overwrite, HTTP/2 DoS flaws, and a request-smuggling bug. Here is what applies and the upgrade path.

Jan 28, 20255 min read
Vulnerabilities

Nginx 1.20.1 Vulnerabilities: What to Patch

Nginx 1.20.1 fixed a real, exploitable DNS resolver bug — if you're still running an older 1.20.x or 1.19.x build, here's what the fix addressed and why it matters.

Feb 19, 20244 min read
Infrastructure Security

NGINX Security Configuration Guide for Production Deployments

NGINX powers a third of the internet. Its default configuration is optimized for getting started, not for production security. Here is the gap.

Jul 12, 20224 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

web-server-security — Safeguard Blog