nginx-1.28.3 stable and nginx-1.29.7 mainline versions have been released, with fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755). Additionally, nginx-1.29.7 mainline version introduces support for Multipath TCP and upgrades the default HTTP version to HTTP/1.1 with keep-alive enabled.

nginx-1.28.3 stable and nginx-1.29.7 mainline versions have been released, with fixes for buffer overflow vulnerability in the ngx_http_dav_module (CVE-2026-27654), buffer overflow vulnerabilities in the ngx_http_mp4_module (CVE-2026-27784, CVE-2026-32647), mail session authentication vulnerabilities (CVE-2026-27651, CVE-2026-28753) and OCSP result bypass vulnerability in stream (CVE-2026-28755)

nginx-1.29.6 mainline version has been released, featuring sticky sessions support for upstreams.

njs-0.9.6 version has been released, featuring optional chaining, nullish coalescing assignment (??=), and logical assignment operators (||= and &&=).

nginx-1.28.2 stable and nginx-1.29.5 mainline versions have been released, with a fix for the SSL upstream injection vulnerability (CVE-2026-1642).

njs-0.9.5 version has been released, featuring native modules support for qjs engine in http and stream.

nginx-1.28.1 stable version has been released.

nginx-1.29.4 mainline version has been released, featuring HTTP/2 to backend and Encrypted ClientHello support.

nginx-acme-0.3.0 version has been released.

nginx-1.29.3 mainline version has been released.

njs-0.9.4 version has been released, featuring HTTP forward proxy support for ngx.fetch() API in http and stream.

nginx-1.29.2 mainline version has been released.

njs-0.9.3 bugfix version has been released.

njs-0.9.2 version has been released, featuring HTTP keepalive support for ngx.fetch() API in http and stream.

nginx-1.29.1 mainline version has been released.

nginx-1.28.1 stable version has been released.

nginx-1.29.4 mainline version has been released, featuring HTTP/2 to backend and Encrypted ClientHello support.

nginx-1.29.4 mainline version has been released, featuring HTTP/2 to backend and Encrypted ClientHello.

nginx-acme-0.3.0 version has been released.

nginx-1.29.3 mainline version has been released.

njs-0.9.4 version has been released, featuring HTTP forward proxy support for ngx.fetch() API in http and stream.

nginx-1.29.2 mainline version has been released.

njs-0.9.3 bugfix version has been released.

njs-0.9.2 version has been released, featuring HTTP keepalive support for ngx.fetch() API in http and stream.

nginx-1.29.1 mainline version has been released.

njs-0.9.1 version has been released, featuring state file support for shared dictionary in http and stream, and feature parity with njs for the QuickJS engine.

nginx-1.29.0 mainline version has been released, featuring Early Hints support.

njs-0.9.0 version has been released, featuring 30% performance improvement for the njs engine.

nginx-1.28.0 stable version has been released, incorporating new features and bug fixes from the 1.27.x mainline branch  — including memory usage and CPU usage optimizations in complex SSL configurations, automatic re‑resolution of hostnames in upstream groups, performance enhancements in QUIC, OCSP validation of client SSL certificates and OCSP stapling support in the stream module, variables support in the proxy_limit_rate, fastcgi_limit_rate, scgi_limit_rate, and uwsgi_limit_rate directives, the proxy_pass_trailers directive, and more.

nginx-1.29.3 mainline version has been released.