High DLA-4212-1 1 CVE

modsecurity-apache - security update

Published Jun 9, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	modsecurity-apache	2.9.3-3+deb11u4

Vulnerabilities 1

High 7.5

CVE-2025-48866

ModSecurity has possible DoS vulnerability in sanitiseArg action

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeAr…

owasp-modsecurity ModSecurity modsecurity-apache mod_security Debian Ubuntu Azure Linux

Jun 2, 2025