There is an improper error handling in previous versions, see CVE 2025-54571. This release includes a fix for it.

Full list of changes:

fix: Improper error handling

[PR from private repo - @orangetw, @pgajdos, @ylavic, @theseion, @fzipi, @airween

fixed CVE-2025-54571]

fix: mod_security2's regression tests [Issue #3425 - @airween]

fix: remove unused condition from msc_status_engine.c [Issue #3412 - @airween]

fix: remove unwanted '\0' string terminator from argument's value [Issue #3411 - @airween]