Skip to content
OpenAdvisories

Package · Debian

modsecurity-apache

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-61813

    ModSecurity: Incorrect libcurl TLS hostname verification setting in HttpsClient::download

    ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 2.9.15 and 3.0.17, the HttpsClient::download function in src/utils/https_client.cc sets libcurl CURLOPT_SSL_VERIFYHOST to 1 instead of the …

    owasp-modsecurity ModSecurity modsecurity modsecurity Debian Ubuntu