Nginx versions 1.25.5 and below appear to have a host header filtering validation bug that could possibly be used for malice. Continue reading...