Changes in v2.9.10:
There is a DoS vulnerability in previous versions, see CVE 2025-48866. This release includes a fix for it.
fix: DoS vulnerability
[PR from private repo - @theseion, @fzipi, @airween; fixed CVE-2025-48866]
v2.9.10
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2025-06-02 15:08 UTC
- Importiert: 2026-09-30 08:37 UTC
- CVSS: 7.5
- Quelle-ID:
owasp_modsecurity - uid_hash:
a7bfbe27d1e8ba9c73703dcffa541ff4fe86e6eebf7a04dad13215adaaa7842b
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
7.5 |
HIGH |
7.5 |
2025-06-02 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| OWASP ModSecurity Releases | vendor_advisory | waf, modsecurity, owasp | - | de | https://github.com/owasp-modsecurity/ModSecurity/releases.atom |