Improper error handling: CVE-2025-54571 - 2025 August
We would like to share our take on CVE-2025-54571, which was published on August 5, 2025.
Read more: Improper error handling: CVE-2025-54571 - 2025 August
Articles, Guides & Updates
Technical articles, practical guides, and project updates for anyone using or deploying ModSecurity. Learn best practices, tuning techniques, and real-world insights from the community.
DoS vulnerability: CVE-2025-52891 - 2025 July
We would like to share our take on CVE-2025-52891, which was published on July 1, 2025.
DoS vulnerability: CVE-2025-48866 - 2025 June
We would like to share our take on CVE-2025-48866, which was published on June 2, 2025.
ModSecurity-nginx connector - new release: v1.0.4
The OWASP ModSecurity team is pleased to announce the release of ModSecurity-nginx connector version 1.0.4. This version includes a mixture of new features and bug fixes.
Read more: ModSecurity-nginx connector - new release: v1.0.4