https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-47947.htmlhttps://patchthecve.com/cve/CVE-2025-47947.htmlWed, 17 Jun 2026 09:28:52 +0000HIGH 7.5: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there ishttps://patchthecve.com/cve/CVE-2025-27110.htmlhttps://patchthecve.com/cve/CVE-2025-27110.htmlWed, 17 Jun 2026 09:03:03 +0000HIGH 7.5: Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsecurity3 version 3.0.13 means that, in 3.0.13, Libmodsecurity3 https://patchthecve.com/cve/CVE-2024-46292.htmlhttps://patchthecve.com/cve/CVE-2024-46292.htmlWed, 17 Jun 2026 07:55:15 +0000HIGH 7.5: A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter. NOTE: this is disputed by the Supplier because it cannot be reproduced. Also, the product's documentation indicates that it is not guaranteed to be usabl