SafeLine

v9.3.9 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Network Security

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

api-gateway application-security security blueteam bruteforce captcha

+11 more

cve firewall hackers http-flood self-hosted sql-injection vulnerability web-application-firewall web-security websecurity xss

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Upgraded Nginx components mitigate CVE-2026-49975 security risk.

Full changelog

Release Notes

This release focuses on security hardening, an upgrade to the Threat Intelligence Sharing program, and several stability and user experience fixes. Community Edition users are advised to update promptly.

Security Hardening

Upgraded Nginx-related components to mitigate the potential security risk of CVE-2026-49975 and improve the runtime security of the protection service.
Fixed an edge case in static file path handling related to Auth,improving security when abnormal paths are accessed.

Improvements

Upgraded Threat Intelligence Sharing.
Updated the IP geo location database.

Bug Fixes

Fixed an issue where the application access log could automatically switch back to the real time log after refresh or polling while viewing the History log.
Fixed an issue where a failed Free Cert application or renewal could trigger an abnormal full rebuild of application configuration.
Optimized certificate synchronization and configuration reload logic to reduce unnecessary Nginx/MGT reloads when certificate content has not changed.

Security Fixes

CVE-2026-49975 — mitigated by upgrading Nginx-related components; fixed static file path handling edge case in Auth

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track SafeLine

Get notified when new releases ship.

About SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

All releases →