nginx-ui

v2.4.3 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 6d Reverse Proxies & Load Balancers

✓ No known CVEs patched

This release patches 2 known CVEs

Topics

code-completion copilot cron docker go letsencrypt

+9 more

linux macos mcp mcp-server nginx self-hosted vue webui windows

Affected surfaces

rce_ssrf auth

Summary

AI summary

Add site-level access/error log entry points and MiniMax OpenAI provider presets.

Full changelog

Add site-level access and error log entry points from the site list and configuration editor.
Add MiniMax OpenAI-compatible provider presets, regional endpoints, and model suggestions (#1739).

Allow settings saves to round-trip redacted IP whitelist values without validation failures (#1741).
Harden automatic backup filenames against path traversal and unsafe cross-platform names.
Improve Nginx log analytics, indexing, parsing, rotation handling, pagination, and race stability.
Simplify the Nginx log implementation by removing unused optimization paths.
Narrow sensitive settings redaction so operational settings remain visible while credentials still require 2FA reveal.

@0xJacky
@octo-patch
@yyyr-p

Harden automatic backup filenames against path traversal and unsafe cross‑platform names
Narrow sensitive settings redaction to hide credentials while keeping operational settings visible

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track nginx-ui

Get notified when new releases ship.

About nginx-ui

Yet another WebUI for Nginx