Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

The latest versions of both v2.9.x and v3.0.x are supported.

Reporting a Vulnerability

For information on how to report a security issue, please see https://github.com/owasp-modsecurity/ModSecurity#security-issue

Encoded HTML entities possible bypass
GHSA-42w7-rmv5-4x2j published Feb 25, 2025 by airween

High

Learn more about advisories related to owasp-modsecurity/ModSecurity in the GitHub Advisory Database