Vulnerabilities in owasp-modsecurity
7 resultsCVE-2025-48866HIGHModSecurity has possible DoS vulnerability in sanitiseArg actionEPSS 0.8%CVE-2025-47947HIGHModSecurity Has Possible DoS VulnerabilityEPSS 0.6%CVE-2025-27110HIGHLibmodsecurity3 has possible bypass of encoded HTML entitiesEPSS 0.4%CVE-2026-30923HIGHlibModSecurity3 denial of service via segfault when using t:hexDecode on single-character query stringsEPSS 0.4%CVE-2026-42268HIGHModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operatorsEPSS 0.4%CVE-2025-52891MEDIUMModSecurity empty XML tag causes segmentation faultEPSS 0.3%CVE-2025-54571MEDIUMModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code DisclosureEPSS 0.3%