I've assigned this the Global Security Database (GSD) ID GSD-2022-1000285 (https://raw.globalsecuritydatabase.org/GSD-2022-1000285 https://raw.globalsecuritydat

I've assigned this the Global Security Database (GSD) ID GSD-2022-1000285 (https://raw.globalsecuritydatabase.org/GSD-2022-1000285 https://raw.globalsecuritydatabase.org/GSD-2022-1000285) and started a discussion about these informational entries at https://groups.google.com/a/groups.cloudsecurityalliance.org/g/gsd/c/t3l9DJXmN3A https://groups.google.com/a/groups.cloudsecurityalliance.org... TL;DR: if you run nginx I assume you want to know about these types of potential problems, so sticking it into the security database makes a lot of sense in my opinion for discoverability.