github owasp-modsecurity/ModSecurity v2.9.11

latest release: v2.9.12
2 months ago

Changes in v2.9.11:

There is a DoS vulnerability in previous versions, see CVE 2025-52891. This release includes a fix for it.

Full list of changes:

  • fix: prevent segmentation fault if the XML node is empty
    [PR from private repo - @theseion, @fzipi, @RedXanadu, @airween; fixed CVE-2025-52891]
  • Plug memory leak when msre_op_validateSchema_execute() exits normally (validateSchema)
    [Issue #3401 - @nic-prgs]
  • chore: bump version in MSI installer.wxs
    [Issue #3400 - @airween]
  • Fix resource leaks in msc_status_engine_mac_address
    [Issue #3391 - @amezin]

Don't miss a new ModSecurity release

NewReleases is sending notifications on new releases.