Nginx core developer quits project in security dispute, starts “freenginx” fork
ID: 23a3d4d6-298b-5cc8-9efb-45b216e8a54f
STIX ID: report--23a3d4d6-298b-5cc8-9efb-45b216e8a54f
Feed Name: Ars Technica Security (tag)
The report describes a governance and disclosure dispute in the NGINX project, where developer Maxim Dounin left after F5 (as a CNA) assigned CVEs to bugs in the experimental HTTP/3/QUIC code against the project’s stated policy. F5 and its engineer contend the CVE process and public disclosure protect users, while Dounin argues it ignored project policy and developer consensus. The piece focuses on policy and community dynamics, not on technical vulnerability details or active exploitation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.