modsecurity-apache vulnerabilities (Ubuntu)

9 vulnerabilities.

• modsecurity-apache Ubuntu [GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules] CVE-2026-104269 No scoreOctober 5, 2026
• modsecurity-apache Ubuntu [GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules] CVE-2026-104259 No scoreOctober 5, 2026
• modsecurity-apache Ubuntu [GHSA-2vqc-36qp-ccmw: Weak libcurl TLS hostname verification setting when fetching over HTTPS] CVE-2026-61813 No scoreOctober 1, 2026
• modsecurity-apache Ubuntu [GHSA-cxqf-vgrr-xxrv: HTML decoder missing entities, leading to evasion] CVE-2026-61812 No scoreOctober 1, 2026
• modsecurity-apache Ubuntu ModSecurity has possible DoS vulnerability in sanitiseArg action CVE-2025-48866 Fix available 7.5 HighJune 2, 2025
• modsecurity-apache Ubuntu ModSecurity Has Possible DoS Vulnerability CVE-2025-47947 Public exploitFix available 7.5 HighMay 21, 2025
• modsecurity-apache Ubuntu In ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can... CVE-2023-24021 Fix available 7.5 HighJanuary 20, 2023
• modsecurity-apache Ubuntu In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed... CVE-2022-48279 Fix available 7.5 HighJanuary 20, 2023
• modsecurity-apache Ubuntu ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects... CVE-2021-42717 Public exploitFix available 7.5 HighDecember 7, 2021