In the hours following the release of CVE-2026-93479 for the project NGINX, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix a heap buffer overflow in worker script evaluation triggered by crafted requests when regex map captures are referenced before the map output, or when a non-cacheable variable is used in certain string expressions, causing worker restarts and potentially code execution if ASLR is disabled or bypassed. This is due to the affected components being written in C, the only programming language where these vulnerabilities regularly happen. "This was a terrible tragedy,...