for a long time i have replaced my nginx instances with openresty ( the open source version with Lua scripting ) and the CVEs seem to be less critical and solved faster:

https://app.opencve.io/cve/?q=product%3Aopenresty+OR+vendor%...

https://app.opencve.io/cve/?q=product%3Anginx