Lool.
List of vulns in nginx/1.14.0: https://www.cybersecurity-help.cz/vdb/soft/f5_networks/nginx...
Also https://nginx.org/en/CHANGES-1.14
Backported security patches don't bump the version string.
Backported security patches don't bump the version string.