nginx-1.30.5
stable and
nginx-1.31.6
mainline versions have been released,
with fixes for
buffer overflow
vulnerability when using ngx_http_v3_module (CVE-2026-90439).
Made restart limits opt-in for applications, preview deployments, and service applications. Existing resources that still used the previous limit of 10 restarts were reset to unlimited.
Fixes
Hid application names, server names, deployment URLs, team member emails, and job IDs from the Helper deployment check unless detailed output was explicitly requested.
Improvements
Updated the supported Traefik patch releases to 3.7.13, 3.6.25, and 2.11.57.
Added an All option to the log viewer and accepted lines=all across application, database, and service log APIs. The existing -1 value remained available for compatibility.
Fixes
Fixed scheduled backup deletion for service databases so it kept the database context and returned to the correct backup page.
Preserved each service component’s stored application or database type when generating Traefik labels.
Restored hourly Sentinel version checks for enabled, eligible servers while continuing to exclude build servers.
Improvements
Ran Traefik version checks whenever Coolify checked for updates instead of only once a week.
Updated Coolify Helper to 1.0.17 and moved the bundled MinIO client to a pinned AIStor release.
Log in
