[CVE-2026-33691 ] Published: Apr 2, 2026, 3:03:52 PM UTC
The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.9 and 4.25.0, a bypass was identified in OWASP CRS tha
High(7.5) Affected Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1+deb12u3
nvd · modsecurity-crs · debian · bookworm; nvd · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1+deb12u3
nvd · modsecurity-crs · debian · bookworm; nvd · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Affected · Fixed: 3.3.4-1+deb12u3
nvd · modsecurity-crs · debian · bookworm; nvd · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Affected · Fixed: 3.3.4-1+deb12u3
nvd · modsecurity-crs · debian · bookworm; nvd · modsecurity-crs · debian · 12
[CVE-2022-39955 ] Published: Oct 9, 2022, 10:00:00 PM UTC
modsecurity-crs: CVE-2022-39955
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:29:38 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
[CVE-2022-39956 ] Published: Oct 9, 2022, 10:00:00 PM UTC
modsecurity-crs: CVE-2022-39956
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:29:38 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
[CVE-2022-39957 ] Published: Oct 9, 2022, 10:00:00 PM UTC
modsecurity-crs: CVE-2022-39957
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:29:38 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
[CVE-2022-39958 ] Published: Oct 9, 2022, 10:00:00 PM UTC
modsecurity-crs: CVE-2022-39958
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:29:38 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.4-1
dsa · modsecurity-crs · debian · bookworm
[CVE-2020-22669 ] Published: Sep 2, 2022, 6:15:11 PM UTC
modsecurity-crs: CVE-2020-22669
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:49:07 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.2-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.2-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.2-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.2-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
[CVE-2021-35368 ] Published: Nov 5, 2021, 6:15:09 PM UTC
modsecurity-crs: CVE-2021-35368
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:58:30 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.2-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.3.2-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.2-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.3.2-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
[CVE-2019-13464 ] Published: Jul 9, 2019, 7:15:12 PM UTC
modsecurity-crs: CVE-2019-13464
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:39:55 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
[CVE-2019-11391 ] Published: Apr 21, 2019, 2:29:00 AM UTC
modsecurity-crs: CVE-2019-11391
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:38:43 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
[CVE-2019-11390 ] Published: Apr 21, 2019, 2:29:00 AM UTC
modsecurity-crs: CVE-2019-11390
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:38:43 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
[CVE-2019-11389 ] Published: Apr 21, 2019, 2:29:00 AM UTC
modsecurity-crs: CVE-2019-11389
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:38:43 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Affected
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
[CVE-2019-11388 ] Published: Apr 21, 2019, 2:29:00 AM UTC
modsecurity-crs: CVE-2019-11388
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:38:43 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
[CVE-2019-11387 ] Published: Apr 21, 2019, 2:29:00 AM UTC
modsecurity-crs: CVE-2019-11387
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:38:43 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.1.1-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.1.1-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.1.1-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.1.1-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
[CVE-2018-16384 ] Published: Sep 3, 2018, 2:29:00 AM UTC
modsecurity-crs: CVE-2018-16384
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:35:04 PM UTC
Details (4) 3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u3 · all · bookworm
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12
3.3.4-1+deb12u1 · all · bookworm-security
Fixed · Fixed: 3.2.0-1
dsa · modsecurity-crs · debian · bookworm; dsa · modsecurity-crs · debian · 12