Multiple vulnerabilities have been identified in NGINX Plus and NGINX Open Source affecting versions prior to 1.24.0-15.oe2403sp3. These include heap buffer overflows triggered by specific configurations involving the alias directive with rewrite and set/return directives referencing $request_filename, or map directives using regex capture variables. Another vulnerability involves a use-after-free condition when asynchronous file I/O is enabled with Server Side Includes. Additionally, a flaw in SSL session ticket key rotation can allow forging of client SSL sessions, potentially bypassing client certificate verification. These vulnerabilities can lead to denial-of-service, memory corruption, or code execution, especially on systems without ASLR or where ASLR can be bypassed. No control plane exposure is involved; these are data plane issues only. A patch is available in version 1.24.0-15.oe2403sp3.