---
title: AWS AMI 2026-05-14
date: 2026-05-14T00:00:00.000Z
slug: ami-2026-05-14
tags:
  - release
  - ami
description: >-
  New EC2 scope AMIs (null-runtime-85 and null-runtime-arm-16) with nginx
  1.30.1, which fixes CVE-2026-42945.
canonical: 'https://docs.nullplatform.com/changelog/ami-2026-05-14'
---
The EC2 scope AMIs `null-runtime-85` (x86) and `null-runtime-arm-16` (arm64) move the nginx sidecar to nginx 1.30.1.

:::warning Action required
The nginx in the previous AMIs is affected by CVE-2026-42945. Move your EC2 scopes to the new AMIs and redeploy them.
:::

## Fixes

- **nginx.** The nginx image baked into the AMI (`np-nginx` 1.3.3) is now built on nginx 1.30.1, which fixes CVE-2026-42945.

## Upgrade

The AMIs are shared with your AWS account. Find them by name (`null-runtime-85` and `null-runtime-arm-16`), set their IDs in `ami.id` of your [EC2 provider](/docs/providers/supported-integrations/compute-management/ec2-configuration), and redeploy your scopes. Each scope keeps running the previous AMI until it's redeployed. To track that rollout, see [AMI drift detection](/docs/tutorials/ami-drift).