Worked on security hardening for the jxxghp/MoviePilot repository by addressing a critical vulnerability, CVE-2026-42945, through improvements to Nginx rewrite rules. The approach involved implementing named captures within the rewrite configuration, which enhanced both the security and maintainability of URL routing. This change reduced the risk of misrouting and potential exploitation, while also simplifying future updates to rewrite logic. The work demonstrated practical application of configuration management and DevOps principles, with a focus on security best practices. The solution was delivered as a targeted bug fix, providing clear traceability from the commit to the CVE mitigation effort.