The recommended way off installing it uses apache instead of nginx, which happens not to be vulnerable.
Only if you looked up their instructions for nginx did you get burned.
Only if you looked up their instructions for nginx did you get burned.
We have a fair bit of legacy stuff hanging around, all nginx+php, none of which appear to be vulnerable due to consistent use of try_files.