Packages / openSUSE Leap 16.0 / Productivity/Networking/Security / owasp-modsecurity-crs

[Source: owasp-modsecurity-crs]

Package: owasp-modsecurity-crs (3.3.5-bp160.1.9)

OWASP ModSecurity Common Rule Set (CRS)

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.

Other Packages Related to owasp-modsecurity-crs:

  • dep: /bin/bash

    Package not available

  • dep: /usr/bin/env

    Package not available

  • dep: /usr/bin/perl

    Package not available

Download owasp-modsecurity-crs

ArchitecturePackage sizeInstalled sizeFilesPackage
noarch184 KiB850 KiBlist of filesDownload

Package file paths (145)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/share/doc/packages/owasp-modsecurity-crs
  • /usr/share/doc/packages/owasp-modsecurity-crs/CHANGES.md
  • /usr/share/doc/packages/owasp-modsecurity-crs/README.md
  • /usr/share/doc/packages/owasp-modsecurity-crs/README.SUSE
  • /usr/share/licenses/owasp-modsecurity-crs
  • /usr/share/licenses/owasp-modsecurity-crs/LICENSE
  • /usr/share/owasp-modsecurity-crs
  • /usr/share/owasp-modsecurity-crs/crs-setup.conf.example
  • /usr/share/owasp-modsecurity-crs/rules
  • /usr/share/owasp-modsecurity-crs/rules/crawlers-user-agents.data
  • /usr/share/owasp-modsecurity-crs/rules/iis-errors.data
  • /usr/share/owasp-modsecurity-crs/rules/java-classes.data
  • /usr/share/owasp-modsecurity-crs/rules/java-code-leakages.data
  • /usr/share/owasp-modsecurity-crs/rules/java-errors.data
  • /usr/share/owasp-modsecurity-crs/rules/lfi-os-files.data
  • /usr/share/owasp-modsecurity-crs/rules/php-config-directives.data
  • /usr/share/owasp-modsecurity-crs/rules/php-errors.data
  • /usr/share/owasp-modsecurity-crs/rules/php-function-names-933150.data
  • /usr/share/owasp-modsecurity-crs/rules/php-function-names-933151.data
  • /usr/share/owasp-modsecurity-crs/rules/php-variables.data
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-901-INITIALIZATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-903.9001-DRUPAL-EXCLUSION-RULES.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-903.9002-WORDPRESS-EXCLUSION-RULES.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-903.9004-DOKUWIKI-EXCLUSION-RULES.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-903.9005-CPANEL-EXCLUSION-RULES.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-903.9006-XENFORO-EXCLUSION-RULES.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-905-COMMON-EXCEPTIONS.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-910-IP-REPUTATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-912-DOS-PROTECTION.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-921-PROTOCOL-ATTACK.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-922-MULTIPART-ATTACK.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-931-APPLICATION-ATTACK-RFI.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-944-APPLICATION-ATTACK-JAVA.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-950-DATA-LEAKAGES.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-952-DATA-LEAKAGES-JAVA.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-953-DATA-LEAKAGES-PHP.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-954-DATA-LEAKAGES-IIS.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-959-BLOCKING-EVALUATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf.example
  • /usr/share/owasp-modsecurity-crs/rules/restricted-files.data
  • /usr/share/owasp-modsecurity-crs/rules/restricted-upload.data
  • /usr/share/owasp-modsecurity-crs/rules/scanners-headers.data
  • /usr/share/owasp-modsecurity-crs/rules/scanners-urls.data
  • /usr/share/owasp-modsecurity-crs/rules/scanners-user-agents.data
  • /usr/share/owasp-modsecurity-crs/rules/scripting-user-agents.data
  • /usr/share/owasp-modsecurity-crs/rules/sql-errors.data
  • /usr/share/owasp-modsecurity-crs/rules/unix-shell.data
  • /usr/share/owasp-modsecurity-crs/rules/windows-powershell-commands.data
  • /usr/share/owasp-modsecurity-crs/util
  • /usr/share/owasp-modsecurity-crs/util/av-scanning
  • /usr/share/owasp-modsecurity-crs/util/av-scanning/runAV
  • /usr/share/owasp-modsecurity-crs/util/av-scanning/runAV/common.c
  • /usr/share/owasp-modsecurity-crs/util/av-scanning/runAV/common.h
  • /usr/share/owasp-modsecurity-crs/util/av-scanning/runAV/comp
  • /usr/share/owasp-modsecurity-crs/util/av-scanning/runav.pl
  • /usr/share/owasp-modsecurity-crs/util/av-scanning/runAV/runAV.c
  • /usr/share/owasp-modsecurity-crs/util/av-scanning/runAV/runAV-clamd.c
  • /usr/share/owasp-modsecurity-crs/util/browser-tools
  • /usr/share/owasp-modsecurity-crs/util/browser-tools/js-overrides.js
  • /usr/share/owasp-modsecurity-crs/util/crs2-renumbering
  • /usr/share/owasp-modsecurity-crs/util/crs2-renumbering/IdNumbering.csv
  • /usr/share/owasp-modsecurity-crs/util/crs2-renumbering/README
  • /usr/share/owasp-modsecurity-crs/util/crs2-renumbering/update.py
  • /usr/share/owasp-modsecurity-crs/util/geo-location
  • /usr/share/owasp-modsecurity-crs/util/geo-location/README
  • /usr/share/owasp-modsecurity-crs/util/honeypot-sensor
  • /usr/share/owasp-modsecurity-crs/util/honeypot-sensor/mlogc-honeypot-sensor.conf
  • /usr/share/owasp-modsecurity-crs/util/honeypot-sensor/modsecurity_crs_10_honeypot.conf
  • /usr/share/owasp-modsecurity-crs/util/honeypot-sensor/README.md
  • /usr/share/owasp-modsecurity-crs/util/id-range
  • /usr/share/owasp-modsecurity-crs/util/join-multiline-rules
  • /usr/share/owasp-modsecurity-crs/util/join-multiline-rules/join.py
  • /usr/share/owasp-modsecurity-crs/util/README
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/920600.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/921421.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/921422.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/922110-chain1.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/include
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/include/allowed-charsets.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-932100.txt
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-932105.txt
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-932106.txt
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-932110.txt
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-932115.txt
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-932130.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-932140.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-932150.txt
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-933131.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-933160.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-933161.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-934100.txt
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-941130.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-941160.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942120.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942130.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942140.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942150.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942170.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942180.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942190.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942200.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942210.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942240.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942260.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942280.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942300.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942310.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942320.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942330.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942340.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942350.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942360.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942370.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942380.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942390.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942400.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942410.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942470.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-942480.data
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-assemble.pl
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-assemble-v2.pl
  • /usr/share/owasp-modsecurity-crs/util/regexp-assemble/regexp-cmdline.py
  • /usr/share/owasp-modsecurity-crs/util/regexp-tricks
  • /usr/share/owasp-modsecurity-crs/util/regexp-tricks/negative-lookahead.py
  • /usr/share/owasp-modsecurity-crs/util/send-payload-pls.sh
  • /usr/share/owasp-modsecurity-crs/util/verify.rb
  • /usr/share/owasp-modsecurity-crs/util/virtual-patching
  • /usr/share/owasp-modsecurity-crs/util/virtual-patching/arachni2modsec.pl
  • /usr/share/owasp-modsecurity-crs/util/virtual-patching/zap2modsec.pl

Field source: openSUSE Leap 16.0 OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Leap 16.0 in the browserBuild an image that includes owasp-modsecurity-crs

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
3.3.5-bp160.1.9leap-16.0 / ossnoarchopenSUSE Leap 16.0 · OSS · multi-architecture184 KiB850 KiBnoarch/owasp-modsecurity-crs-3.3.5-bp160.1.9.noarch.rpm

Field source: openSUSE Leap 16.0 OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-33691]

Published:

The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.9 and 4.25.0, a bypass was identified in OWASP CRS tha

High(7.5)Unknown
Details (1)

  • 3.3.5-bp160.1.9 · noarch · leap-16.0

    Unknown · Fixed: 4.29.0-1.1

    Version impact unknown

    pypi · owasp-modsecurity-crs · opensuse · tumbleweed

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.3.5-bp160.1.9 / noarchObserved Sep 1, 2026sha512 f595849fc001…9394c450Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): f595849fc0014b1b4e21d1b6dace1180b95f4a0ede4401d1c336db64af40d610417745ca68ba208c84bbac562836e57f96e359e1cd1781eb46eff05a9394c450

Field source: openSUSE Leap 16.0 OSS

Sources

  • openSUSE Leap 16.0 OSSSep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

    Repository-signature verification record
    Signed-object SHA-256
    271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable