Is Nginx Proxy Manager affected by CVE-2026-42945?
Hi everyone,
I’m running Nginx Proxy Manager in Docker and I just checked my setup.
The NGINX version inside the container shows: 1.27.X.
I recently updated the container, but I’m trying to understand if my setup is still affected by CVE-2026-42945 (the nginx rewrite module vulnerability affecting versions ≤ 1.30.0).
Since NPM uses OpenResty instead of vanilla nginx, I’m not fully sure how to map the OpenResty version to the affected nginx versions.
Is NPM already patched for this CVE in recent Docker images?