Skip to content

Nginx-UI: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover

High severity GitHub Reviewed Published Apr 27, 2026 in 0xJacky/nginx-ui

No open alerts for this advisory

Give feedback on Dependabot alerts