CVE-2026-105766: Chainguard Academy (edu) affected git revisions

Affected technology

Chainguard Academy (edu) · 0b75ff98057f69b044a3e7194e428066ac5ad0d4 to before 93dc0e50739c225f5aee2e803800a47fc0feb906
Chainguard

Component: Nginx trailing-slash directory redirect
File: nginx.conf

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction

What an attacker can do

An on-path network attacker can read or modify documentation content served to a victim via an HTTPS request for a slashless directory path, because TLS terminates at the load balancer in front of Nginx and the resulting 301 response redirects the client to a plaintext http:// URL. Source advisory’s CVSS 4.0 assessment (base score 2.3/10) rates confidentiality and availability impact as none; integrity impact as low.