denji CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW denji CVE published 2026-10-12

CVE-2026-108981

CVE-2026-108981 is a vulnerability in the ngx_cache_purge module that can allow file deletion via a symlink attack. The attacker must be able to create a symlink inside the cache path. Version 3.0.4 fixes this for the case of a symlink created at an arbitrary earlier time, but does not resolve an applicable TOCTOU race condition. This vulnerability affects users of ngx_cache_purge who should verify their [truncated]