v3.0.16

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-29 19:35 UTC
  • Importiert: 2026-09-30 08:37 UTC
  • CVSS: 8.6
  • Quelle-ID: owasp_modsecurity
  • uid_hash: 0f56052da288a9d2bff428512f390de95e5cb5243f467db1ccef07d66487b7f6

Inhalt

Major changes in v3:

fix: wrong behavior in utf8toUnicode on i386 architecture

[PR from private repo - @airween; fixed CVE-2026-52761]

fix: multipart/form-data request body parser invalidly handles \r and \n characters

[PR from private repo - @sondt99, @dungNHVhust, @hnakamur, @airween; fixed CVE-2026-52747]

fix(lexer): rejection of '@' in ctl:ruleRemoveTarget actions

[PR #3566, #3589 - @Jitterx69, @airween]

fix: cppcheck warnings with version 2.21.0

[PR #3577 - @airween]

ci: pin Windows version in workflow

[PR #3570 - @airween]

Alternative fix for @inspectFile: improved fork safety with multi-threaded tests (PR #3489)

[PR #3552 - @Easton97-Jens]

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-52747

HIGH

8.6

HIGH

8.6

2026-07-10

CVE-2026-52761

HIGH

8.6

MEDIUM

5.8

2026-07-10

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
OWASP ModSecurity Releases

owasp_modsecurity

vendor_advisory waf, modsecurity, owasp - de https://github.com/owasp-modsecurity/ModSecurity/releases.atom