GoKawiilF5 issues emergency patches for three critical NGINX flaws
F5 released out-of-band security updates fixing multiple NGINX vulnerabilities, including three critical-severity bugs in the ngx_http_v3_module and the map directive. The flaws allow unauthenticated remote attackers to trigger heap overflows or use-after-free conditions in NGINX worker processes, potentially causing crashes or code execution on non-default configurations. Affected products include NGINX Plus, NGINX Open Source, Ingress Controller, Gateway Fabric, and Instance Manager.