nginx 1.4.7 End of life
This release line no longer gets security fixes.
Upgrade to 1.30.6
The lowest fixed release that is still supported.
- Known vulnerabilities
- 15 (3 critical, 7 high)
- End of life
- Yes, since 2014-04-24
- Data as of
- 2026-10-24 18:07 UTC
Vulnerabilities
- CVE-2026-42945 critical fixed in 1.30.1
- CVE-2026-42533 critical fixed in 1.30.4
- CVE-2026-15176 critical fixed in 1.30.6
- CVE-2026-27654 high fixed in 1.28.3
- CVE-2026-27651 high fixed in 1.28.3
- CVE-2026-32647 high fixed in 1.28.3
- CVE-2026-27784 high fixed in 1.28.3
- CVE-2026-56434 high fixed in 1.30.4
- CVE-2026-42946 high fixed in 1.30.1
- CVE-2026-1642 high fixed in 1.28.2
And 5 more with lower severity.
- 2 nginx vulnerabilities are still under review and not included in this verdict.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.