Multiple vulnerabilities affect NGINX Plus and NGINX Open Source, including heap buffer overflows and use-after-free conditions triggered by specific configurations involving alias, rewrite, set/return directives, regex map variables, asynchronous file I/O with SSI, and SSL session cache settings. These vulnerabilities can lead to denial-of-service (DoS), memory corruption, or potential remote code execution, especially on systems with ASLR disabled or bypassed. Additionally, a flaw in SSL session ticket key rotation can allow forging of client SSL sessions, potentially bypassing client certificate verification. These issues impact the data plane only and do not expose the control plane. Fixed versions are available.