NGINX Plus/NGINX Open Source ngx_http_core_module can hit a use-after-free when async file I/O (AIO) is enabled and an SSI page processes include virtual directives. Remote requests can crash a worker (DoS) or corrupt memory; code execution is possible if ASLR is disabled or bypassed. Upgrade to NGINX OSS 1.30.6+/1.31.7+ and NGINX Plus fixed builds to mitigate.