About CVE-2024-46292 - 2024 October
We would like to share our take on CVE-2024-46292, which was published on October 9 2024.
Blogs
New versions - 2024 September
The OWASP ModSecurity team is pleased to announce the release of versions 2.9.8 and 3.0.13. These versions both include a mixture of new features and bug fixes.
ModSecurity.org: website available again
After a long period, the modsecurity.org website is available again with renewed content and form.
Save the date: developers meeting on 5th of June, 2024 - Leuven, Belgium
When the transfer of control took place at the end of January, the interim management stated that they wanted a one-on-one meeting with developers interested in maintaining ModSecurity. It’s time. Please save the date: we would like to organize a mini-event on June 5, 2024, where we can meet everyone in person and discuss future tasks. The venue is Leuven, Belgium - the exact location has yet to be determined. We will meet around 13:00 and will leave about 18:00.
Modsecurity is arising like Phoenix from the ashes
The ModSecurity is preparing for the new hand. The announced transfer of custodianship to the OWASP Foundation became a fact, the project awaits a new adventure! If you add to it that the Core Rule Set, the widespread set of generic attack detection rules, is already under the roof of OWASP, and both ModSecurity and CRS gather around themselves vast of security experts, you might come to the conclusion that this can happen without you, can’t you?