FazBrowse GitHub Viewer | Trending | | Home

Tools: [Download Repo ZIP] [Original HTTPS Page]

Overview · owasp-modsecurity/ModSecurity · GitHub

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

The latest versions of both v2.9.x and v3.0.x are supported.

Reporting a Vulnerability

For information on how to report a security issue, please see https://github.com/owasp-modsecurity/ModSecurity#security-issue

Transformation utf8toUnicode produces wrong output on i386 architecture
GHSA-qjgm-7gp4-f8qq published Jun 29, 2026 by airween

Moderate
Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass
GHSA-rcw9-2f5r-7p88 published Jun 29, 2026 by airween

High
Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators
GHSA-vwr3-7x7g-7p9w published Apr 28, 2026 by airween

High
libModSecurity3: Segfault on query strings with a single character when using `t:hexDecode`
GHSA-qrjc-3jpc-3h2g published Apr 28, 2026 by airween

High
Insufficient Return Value Handling on ModSecurity leads to XSS and Source Code Disclosure
GHSA-cg44-9m43-3f9v published Aug 5, 2025 by airween

Moderate
Empty XML tag causes segmentation fault
GHSA-gw9c-4wfm-vj3x published Jul 1, 2025 by airween

Moderate
Possible DoS vulnerability in sanitiseArg action
GHSA-f82j-8pp7-cw2w published Jun 2, 2025 by airween

High
Possible DoS vulnerability
GHSA-859r-vvv8-rm8r published May 21, 2025 by airween

High
Encoded HTML entities possible bypass
GHSA-42w7-rmv5-4x2j published Feb 25, 2025 by airween

High

Learn more about advisories related to owasp-modsecurity/ModSecurity in the GitHub Advisory Database

Back | FazBrowse Home | New Git URL