Mastodawn

Critical security fix in NPMplus: any non-admin user could escalate to admin. Upstream nginx-proxy-manager is STILL vulnerable. Also ships TLS folder permission hardening and aws-lc support. #selfhosted #homelab

https://github.com/ZoeyVid/NPMplus/releases/tag/2026-04-10-r1

Release 2026-04-10-r1 · ZoeyVid/NPMplus

What Changed since last release security: fix NginxProxyManager#5441, this allowed any non-admin user to make themself an admin, please note that upstream nginx-proxy-manager is still vulnerable t...

GitHub