CVE-2026-42945 and NGF

[span]

Hi!

I'm curious if NGF is vulnerable to CVE-2026-42945. The old ingress controller was, but NGF is a new beast for me. I could not find an active issue or pr regarding updating the nginx oss image to 1.30.1

Cheers.

[sjberman]

Hi @span, yes we are in the process of upgrading the nginx version and will be releasing a patch.

[zhiweiv]

Can you share the ETA of 2.6.1, I saw the PR is already merged.

[ciarams87]

Hi @zhiweiv, apologies for the delay, we are aiming to have this released tomorrow (May 20th)