EasyApache4 v25.74 - Security Hotfix for ea-nginx

WebPros has released an update for EasyApache 4!  Take a look at some highlights below, and then join us on the cPanel Community Forums, Discord, or Reddit to talk about this update and much more. If you have additional questions, feel free to reach out on one of our social channels.

• ea-nginx
• EA-13503: Update ea-nginx from v1.31.2 to v1.31.3
• (CVE-2026-42533) Critical: Heap buffer overflow when using map with regex, potentially allowing remote code execution or a worker process denial of service via a crafted HTTP request. Affected versions 0.9.6-1.31.2, fixed in 1.31.3.
• (CVE-2026-60005) Medium: Memory disclosure when using ngx_http_slice_module. Affected versions 1.15.8-1.31.2, fixed in 1.31.3.
• (CVE-2026-56434) Medium: Use-after-free when using ngx_http_ssi_module. Affected versions 0.8.11-1.31.2, fixed in 1.31.3.

• ea-nginx-echo
• EA-13503: Rebuild ea-nginx-echo against ea-nginx v1.31.3

• ea-nginx-headers-more
• EA-13503: Rebuild ea-nginx-headers-more against ea-nginx v1.31.3

• ea-nginx-njs
• EA-13503: Rebuild ea-nginx-njs against ea-nginx v1.31.3

• ea-nginx-passenger
• EA-13503: Rebuild ea-nginx-passenger against ea-nginx v1.31.3

• ea-modsec30-connector-nginx
• EA-13503: Rebuild ea-modsec30-connector-nginx against ea-nginx v1.31.3