Skip to content

Nginx-UI: Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints

High severity GitHub Reviewed Published Apr 18, 2026 in 0xJacky/nginx-ui • Updated May 7, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts