Technical articles, practical guides, and project updates for anyone using or deploying ModSecurity. Learn best practices, tuning techniques, and real-world insights from the community.
The OWASP ModSecurity team is pleased to announce the release of ModSecurity-nginx connector version 1.0.4. This version includes a mixture of new features and bug fixes.
Read more: ModSecurity-nginx connector - new release: v1.0.4
We would like to share our take on CVE-2025-47947, which was published on May 21, 2025.
Read more: Possible DoS vulnerability: CVE-2025-47947 - 2025 May
We would like to share our take on CVE-2025-27110, which was published on February 25, 2025.
Read more: HTML Entity Decoding Regression: CVE-2025-27110 - 2025 February
It’s time to switch to using the PCRE library.