Product by Debian
Modsecurity-crs
7 known vulnerabilities in Modsecurity-crs (Debian), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-21876 | OWASP CRS has multipart bypass using multiple content-type parts | 9.3 | |
| Critical | CVE-2020-22669 | OWASP ModSecurity Core Rule Set: SQL Injection | 9.8 | |
| Critical | CVE-2022-39955 | OWASP ModSecurity Core Rule Set: Incorrect Authorization | 7.3 | |
| High | CVE-2022-39958 | OWASP ModSecurity Core Rule Set: Incorrect Authorization | 7.5 | |
| Critical | CVE-2023-38199 | OWASP Coreruleset: Type Confusion | 9.8 | |
| Critical | CVE-2022-39956 | OWASP ModSecurity Core Rule Set: Incorrect Authorization | 7.3 | |
| High | CVE-2022-39957 | OWASP ModSecurity Core Rule Set: Protection Mechanism Failure | 7.3 |