Information on source package modsecurity

Available versions

ReleaseVersion
buster3.0.3-1+deb10u2
bullseye3.0.4-2
bookworm3.0.8-1
sid3.0.9-1

Open issues

BugbusterbullseyebookwormsidDescription
CVE-2023-28882fixedfixedvulnerable (no DSA)fixedTrustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial ...
CVE-2022-48279vulnerable (no DSA)vulnerable (no DSA)fixedfixedIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart reque ...
CVE-2021-42717vulnerable (no DSA)vulnerable (no DSA)fixedfixedModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objec ...
CVE-2019-25043vulnerable (no DSA)fixedfixedfixedModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as dem ...

Resolved issues

BugDescription
CVE-2020-15598Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a ...
CVE-2019-19886Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send c ...

Security announcements

DSA / DLADescription
DSA-4765-1modsecurity - security update

Search for package or bug name: Reporting problems