Nginx · Nginx Unit · CVE-2025-1695
**Name of the Vulnerable Software and Affected Versions**
NGINX Unit versions prior to 1.34.2
**Description**
The issue allows a remote attacker to cause a degradation that can lead to a limited denial-of-service (DoS) by sending undisclosed requests, which can lead to an infinite loop and increase CPU resource utilization. This is a data plane issue only, with no control plane exposure.
**Recommendations**
For versions prior to 1.34.2, update to version 1.34.2 or later to resolve the issue.