Disclaimer: Automated heuristics over public release notes and vulnerability databases (OSV / NVD). Can be wrong or incomplete. Always back up first and validate upgrades yourself. Stack Watch does not invent CVE IDs or issue counts. This is an MVP research project, not a live paid service.

Home / Nginx Proxy Manager / v2.15.0

Nginx Proxy Manager v2.15.0

UPDATE_WITH_CARE

Security-related language in release notes; update after a backup if you are affected.

Published: 2026-05-31T23:57:01Z · GitHub release

Summary of changes

Warning Major update: Debian Trixie base image, OpenResty, Certbot and Python have been updated. Exercise caution with this upgrade as your DNS plugins may not work as expected and require tweaks to dependencies. See the new Certbot Doc for more info. ## Changes - Updated OpenResty to address CVE-2026-42945 / CVE-2026-8711 / CVE-2026-9256 - Certbot DNS plugin installs are tested in CI now; but usage of them for requesting certs is not - Fix SQLLite issue with NOW() - Regenerate configs improvements - Lots of Node dep updates - Fix incorrect html description - Various Cypress improvements - Fix silent nginx config corruption in 50-ipv6.sh (thanks @bill-mahoney) - Added PUT and DELETE method to Access-Control-Allow-Methods field (thanks @MBulli) - Adds column sorting to Nginx tables (thanks @clementfavre) …

Breaking changes

None detected by heuristics.

CVEs linked to this release

None linked from release notes or OSV fixed-in match.

Linked issues / PRs mentioned

not stated in release notes

Back up first

Always back up first. Stack Watch briefs are automated heuristics over public release notes and vulnerability databases. They can be wrong or incomplete. You are responsible for validating upgrades in your own environment. We never invent CVE IDs or issue counts — if a number is missing, it was not found.