Gitea
Gitea has switched to version 28 numbering; its feed has caught only the dev tags.
Comparison · Infra & APIs
NGINX vs ZoneMinder
A side-by-side editorial comparison of NGINX and ZoneMinder — release velocity, themes, recent moves, and the top alternatives to consider.
NGINX vs ZoneMinder: at a glance
What is NGINX?
nginx patched HTTP/3 twice in a month and is trimming old platform code on mainline.
nginx runs a 1.31 mainline and a 1.30 stable line. After 1.31.5 added a native control API, a JSON module and predicate locations in September, the following releases were mostly security: 1.31.6 and 1.30.5 fixed an HTTP/3 buffer overflow (CVE-2026-90439), then 1.31.7 and 1.30.6 fixed five more CVEs including HTTP/3 request body injection. 1.31.8 on October 21 removed the Win32 iocp event module and fixed further HTTP/3 issues.
What is ZoneMinder?
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
ZoneMinder's 1.38 line is in security maintenance. 1.38.5 fixes 19 reported vulnerabilities, including authenticated OS command execution through the filter debug modal, a JPEG heap overflow and cross-monitor authorization bypasses. It replaces a default or empty auth hash secret on upgrade and refuses token logins while the public default is set. 1.38.6 followed within the hour only to fix RPM builds, since no 1.38.5 RPMs were published.
NGINX vs ZoneMinder: editorial side-by-side
NGINX
5.0INFRA · APIS
nginx patched HTTP/3 twice in a month and is trimming old platform code on mainline.
◆ Current state
nginx runs a 1.31 mainline and a 1.30 stable line. After 1.31.5 added a native control API, a JSON module and predicate locations in September, the following releases were mostly security: 1.31.6 and 1.30.5 fixed an HTTP/3 buffer overflow (CVE-2026-90439), then 1.31.7 and 1.30.6 fixed five more CVEs including HTTP/3 request body injection. 1.31.8 on October 21 removed the Win32 iocp event module and fixed further HTTP/3 issues.
◆ Where it's heading
HTTP/3 has needed fixes in each of the last three mainline releases, two of them CVEs. Mainline is adding features and removing legacy code at the same time, while stable gets the CVE backports.
◆ Prediction
More HTTP/3 fixes on both lines are likely; on mainline, follow-up work on the control API and JSON module is the next feature thread to watch.
ZoneMinder
5.0INFRA · APIS
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
◆ Current state
ZoneMinder's 1.38 line is in security maintenance. 1.38.5 fixes 19 reported vulnerabilities, including authenticated OS command execution through the filter debug modal, a JPEG heap overflow and cross-monitor authorization bypasses. It replaces a default or empty auth hash secret on upgrade and refuses token logins while the public default is set. 1.38.6 followed within the hour only to fix RPM builds, since no 1.38.5 RPMs were published.
◆ Where it's heading
Every 1.38 release since June has been mostly authorization and memory-safety work. The 1.38.0 feature set (RBAC, WebRTC, the monitor function split) is being made safe rather than extended.
◆ Prediction
Further security releases on 1.38 are likely; the entries give no sign of a 1.39 feature release.
Alternatives to NGINX and ZoneMinder
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either NGINX or ZoneMinder.
Skipper
Skipper now serves zone-filtered routes only when its own ingress is balanced across zones.
rsyslog
rsyslog keeps adding cloud outputs, with Kinesis in October after CloudWatch in August.
KubeVirt
KubeVirt 1.10 reaches beta with 1,345 changes from 94 contributors.
ToolJet
ToolJet's beta adds data source folders, database environments and git sync for workflows.
Apereo CAS
Apereo CAS 8.1.0 reaches a third release candidate with 8.0.0 still not final.
See all NGINX alternatives → · See all ZoneMinder alternatives →
Recent activity from NGINX and ZoneMinder
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 12d agoNGINXnginx 1.31.8 removes the Win32 iocp module, fixes HTTP/3
- 18d agoNGINXnginx 1.31.7 fixes five CVEs on mainline
- 19d agoNGINXnginx 1.30.6 fixes five CVEs including HTTP/3 injection
- 27d agoZoneMinderZoneMinder 1.38.6 republishes 1.38.5 with fixed RPM builds
- 27d agoZoneMinderZoneMinder 1.38.5 fixes 19 vulnerabilities, including RCE
- 1mo agoNGINXnginx 1.30.5 fixes an HTTP/3 buffer overflow
- 1mo agoNGINXnginx 1.31.6 fixes HTTP/3 overflow and control API bugs
- 2mo agoNGINXrelease-1.31.5 ⚡
- 2mo agoZoneMinder1.38.4 closes API ACL gaps and two auth bypasses
- 4mo agoZoneMinder1.38.3 supersedes 1.38.2 with RBAC and injection fixes
- 5mo agoZoneMinderchore: bump redhat spec version to 1.39.11
- 8mo agoZoneMinder1.36.38 backports a SQL injection fix to the legacy branch
Frequently asked questions
What is the difference between NGINX and ZoneMinder?
They serve adjacent needs but don't currently overlap on shipped themes. NGINX and ZoneMinder are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is NGINX better than ZoneMinder?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. NGINX and ZoneMinder are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to NGINX?
Top NGINX alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "NGINX alternatives" section above for the current picks, or visit /alternatives/nginx for the full list with editorial commentary on each.
What are the best alternatives to ZoneMinder?
Top ZoneMinder alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "ZoneMinder alternatives" section above for the current picks, or visit /alternatives/zoneminder for the full list with editorial commentary on each.