Nginx security: please check if config is save

Some days ago, vulnerabilities in certain Nginx-configs have been reported:
https://nvd.nist.gov/vuln/detail/CVE-2019-11043
https://bugs.php.net/bug.php?id=78599
https://de.tenable.com/blog/cve-2019-11043-vulnerability-in-php-fpm-could-lead-to-remote-code-execution-on-nginx

I am not shure, if wallabags configuration is unsafe, but it resembles in some way to described fields of problems: https://github.com/wallabag/wallabag/blob/master/docker/nginx/nginx.conf, for instance it contains: "fastcgi_split_path_info ^(.+?\.php)(/.*)$;"