Is github.com/0xJacky/Nginx-UI safe to use?

Vulert records 80 vulnerabilities for github.com/0xJacky/Nginx-UI in Go: 6 critical, 26 high, 7 medium and 0 low, plus 41 not yet rated. 26 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/0xJacky/Nginx-UI's Vulert package health score?

Vulert scores github.com/0xJacky/Nginx-UI 50/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/0xJacky/Nginx-UI affected?

Yes. v1.9.9, the version you would install today, has 58 known vulnerabilities, and 26 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

How many vulnerabilities does github.com/0xJacky/Nginx-UI have?

80 vulnerabilities are recorded for github.com/0xJacky/Nginx-UI in the Go ecosystem: 6 critical, 26 high, 7 medium and 0 low, plus 41 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/0xJacky/Nginx-UI vulnerabilities disclosed?

70 vulnerabilities were recorded for github.com/0xJacky/Nginx-UI in the last 12 months, and the oldest entry in this database dates to 11 Jan 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/0xJacky/Nginx-UI are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/0xJacky/Nginx-UI for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at https://vulert.com/scanner and Vulert keeps checking the github.com/0xJacky/Nginx-UI version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.

Vulnerability Database · Go · Package report

github.com/0xJacky/Nginx-UI: vulnerability history, versions and safety

github.com/0xJacky/Nginx-UI is a package in the Go ecosystem. Vulert records 80 vulnerabilities for it across 120 releases, from Jan 2024 to Oct 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

80 vulnerabilities recorded C6 H26 M7 U41

26 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →

70 in the last 12 months

Most recent disclosure 19 Oct 2026.

See the disclosure history →

0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/0xJacky/Nginx-UI vulnerabilities

Vulert verdict on github.com/0xJacky/Nginx-UI v1.9.9 i

Updated on 23 Oct 2026

Careful: v1.9.9 has 58 known vulnerabilities, and 26 have no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 50/100

Security Unfixed issues
Maintenance Maintaining
Popularity Key ecosystem project
Community Active

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

Current release v1.9.9 — affected i
Vulnerabilities on record 80 over 2 years · 70 in the last year i
Latest disclosure 19 Oct 2026 i
Highest CVSS 9.8 i
With no published fix 26 i
Stars 11,643 i
Last release 41 months ago i
Licence AGPL-3.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

Scan your app free →

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/0xJacky/Nginx-UI, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

Version	Released	Vulert vulnerabilities	Licence	Fix published	Details
v1.9.10-0.20261017061924-978d46bb61cd	17 Oct 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20261016072552-4dbb0e698ba2	16 Oct 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20261015081723-7a9ad969ec91	15 Oct 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20261009010531-d875dbd2fdb7	09 Oct 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20261007115558-fa92e51584c5	07 Oct 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260929115358-79caf96be542	29 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260928093352-ffd63d006518	28 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260927084433-48fade14a130	27 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260926112936-1cf4acacade2	26 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260923134627-89b305256604	23 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260920091621-826c6fae8301	20 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260920055818-6e55a749a550	20 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260918115209-ed3def8e8175	18 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260916035708-7ed4fc4a7fde	16 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260914062617-0189e7bb61ce	14 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260904075558-e30e331303fc	04 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260902021532-5349329a4062	02 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260901081039-1bdffd00bbe8	01 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260901080919-f939a7bfbb0e	01 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260901043436-8c9b9a1aff21	01 Sep 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260826063026-92e920b93402	26 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260821043621-ff2253c59cdb	21 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260817145916-df048321b6c3	17 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260817030527-b079573fe7ce	17 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260814145615-1ccd1c06b3eb	14 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260813021904-b7075adedbd5	13 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260812070654-3a52910949f4	12 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260812061302-537c91a05c07	12 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260805013356-1df16d75f689	05 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260802031809-7d33c62082d9	02 Aug 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260731035401-ab6312550558	31 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260731020546-2ca2a2c95854	31 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260730141914-5784d4f389d6	30 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260729184644-14a53baf669a	29 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260729184644-14d2f2eca183	29 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260729184643-a1a7b150e33d	29 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260729184638-6e582d9e1a4b	29 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260729095244-dec9f8ca91b0	29 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260729084040-acb59fdd81db	29 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260729054026-979422814863	29 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260728114330-580585516dd8	28 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260728091127-37332661c6c3	28 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260728091109-0ecbd106c37b	28 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260728074558-95cd21b70814	28 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260728074433-a3999bd78a3b	28 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260728074146-a467ed652591	28 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260728054150-b014910598d3	28 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260728032328-389e395469fa	28 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260728015646-0c1258613a38	28 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260727065452-347ab6cbb7c3	27 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260726074053-45d66604f894	26 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260722002021-1c27b6946d12	22 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260721153349-83eae23af97d	21 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260721150657-68655518750d	21 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260721142559-8b22d937ad30	21 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260721003202-eb9495bdf4d9	21 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260721002640-60b5f188e7ad	21 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260721001133-fbe0f0c8baa2	21 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260715121817-c6aab4d1f1eb	15 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260715121709-f92218e01054	15 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260712001252-72b136c0360d	12 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260707070323-289d341da6a0	07 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260707064435-67e52a7686d9	07 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260703144159-122d5577be7b	03 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260703134738-0540f3ecf782	03 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260703131214-23d1934099b0	03 Jul 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260626093154-f88b83dc915f	26 Jun 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260626072431-13d3af9df98a	26 Jun 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260623103116-f40e57cea5f5	23 Jun 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260613100722-6053fa0d5488	13 Jun 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260524135002-fa81149e0183	24 May 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260522181940-82c637c36b2f	22 May 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260521084325-10b1e9995d29	21 May 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260521083141-10867218d4ef	21 May 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260517093106-6c86e5a59454	17 May 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260515154754-d87e7785ad8b	15 May 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260513002320-98bb8903f2fa	13 May 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260512145225-3f04b3e776c0	12 May 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260427033204-fd61e8ea6fd2	27 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260422013350-61185c26f43a	22 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260421144050-3e411d38dd82	21 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260421071512-7864e378f5cf	21 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260420155045-d25c9975d62c	20 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260420153922-57b6f982ec69	20 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260419035008-05e544c8f550	19 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260418154745-25dea9f6207a	18 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260418153831-4d96c349912f	18 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260418121950-80a6a7273d43	18 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260418110441-a67285b713d5	18 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260418110252-7ed73f621afe	18 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260418080606-535c8efb38e1	18 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260418065429-329e8589e909	18 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260404142634-0b0f854f9bf9	04 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260404020120-9f1b9bbbba82	04 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260404014818-d895c4a3367b	04 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260403033141-7d9887bfe8e3	03 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260401160604-fb37c94276ba	01 Apr 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260316053337-1a9cd29a3082	16 Mar 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260316033410-95ab34bbe180	16 Mar 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v1.9.10-0.20260316031527-9e41ecf9df55	16 Mar 2026	C5 H16 M6 U31	AGPL-3.0	No	Details →
v0.0.0-20260315142029-20412b5b54f9	15 Mar 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260315142029-20412b5b54f9	15 Mar 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260315024448-bc8df5bedad4	15 Mar 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260315015203-f61bcec547c0	15 Mar 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260314153710-413dc631eea8	14 Mar 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260314152518-7b66578adb47	14 Mar 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260314140443-a6491e437fd8	14 Mar 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260314131159-029142f94402	14 Mar 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260218010950-6ec542fd97ab	18 Feb 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260215005530-e5da6dd96dae	15 Feb 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260204031510-495cb4e71e9c	04 Feb 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20260129154515-18538df8cba0	29 Jan 2026	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20251215135659-0e7ea571109f	15 Dec 2025	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20251209093547-cb1fb691aff4	09 Dec 2025	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20251208094530-9225c962508c	08 Dec 2025	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20251208023428-f520a4459a9d	08 Dec 2025	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20251207030454-f59720426b0e	07 Dec 2025	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20251124141023-98e83f13b593	24 Nov 2025	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20251110081947-bc0844ae8b7f	10 Nov 2025	C5 H16 M6 U31	—	No	Details →
v1.9.10-0.20251109030634-d24d84581676	09 Nov 2025	C5 H16 M6 U31	—	No	Details →

The newest 120 of 359 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

2024 10
2026 70

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 70 of the 80 were recorded in the last 12 months.

Other ways into the data

03 Vulnerabilities

Recorded vulnerabilities for github.com/0xJacky/Nginx-UI

Vulnerability	Severity	Fixed version ↓	Disclosed ↓
CVE-2026-33032: Nginx-UI Unauthenticated MCP Endpoint Allows Remote Nginx Takeover	9.8 critical	No fix published	30 Mar 2026
CVE-2026-42238: Nginx-UI Unauthenticated Remote Code Execution via Backup Restore	9.8 critical	2.3.8	06 May 2026
CVE-2024-23827: Nginx-UI Arbitrary File Write Vulnerability	9.8 critical	2.0.0-beta.12	29 Jan 2024
CVE-2026-27944: Nginx-UI Unauthenticated Backup Download with Key Disclosure	9.8 critical	2.3.3	05 Mar 2026
CVE-2026-33026: nginx-ui Backup Restore Vulnerability Allows Malicious Configuration Injection	9.4 critical	No fix published	30 Mar 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315