https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:21:25.026355+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-00191 bdu:2022-00191 2026-10-04T03:21:25.207384+00:00 bdu:2022-00191 https://cve.radiocsirt.org/vuln/bit-modsecurity-2021-42717 BIT-modsecurity-2021-42717 2026-10-04T03:21:25.207421+00:00

Affected: Bitnami: modsecurity

ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web server being unable to service legitimate requests. Even a moderately large (e.g., 300KB) HTTP request can occupy one of the limited NGINX worker processes for minutes and consume almost all of the available CPU on the machine. Modsecurity 2 is similarly vulnerable: the affected versions include 2.8.0 through 2.9.4.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-918 certfr-2021-avi-918 — Une vulnérabilité a été découverte dans F5 NGINX. Elle permet à un attaquant de provoquer un déni de service à distance. 2026-10-04T03:21:25.207455+00:00 certfr-2021-avi-918 https://cve.radiocsirt.org/vuln/euvd-2026-32151 EUVD-2026-32151 2026-10-04T03:21:25.207471+00:00 EUVD-2026-32151 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42717 fkie_cve-2021-42717 2026-10-04T03:21:25.207482+00:00

ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web server being unable to service legitimate requests. Even a moderately large (e.g., 300KB) HTTP request can occupy one of the limited NGINX worker processes for minutes and consume almost all of the available CPU on the machine. Modsecurity 2 is similarly vulnerable: the affected versions include 2.8.0 through 2.9.4.

 https://cve.radiocsirt.org/vuln/ghsa-w3vf-7fpc-9fww GHSA-w3vf-7fpc-9fww 2026-10-04T03:21:25.207504+00:00

ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web server being unable to service legitimate requests. Even a moderately large (e.g., 300KB) HTTP request can occupy one of the limited NGINX worker processes for minutes and consume almost all of the available CPU on the machine. Modsecurity 2 is similarly vulnerable: the affected versions include 2.8.0 through 2.9.4.

 https://cve.radiocsirt.org/vuln/gsd-2021-42717 gsd-2021-42717 2026-10-04T03:21:25.207520+00:00 gsd-2021-42717 https://cve.radiocsirt.org/vuln/oesa-2021-1464 OESA-2021-1464 — mod_security security update 2026-10-04T03:21:25.207530+00:00

Affected: openEuler:20.03-LTS-SP1: mod_security, openEuler:20.03-LTS-SP2: mod_security

This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information. Security Fix(es): ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web server being unable to service legitimate requests. Even a moderately large (e.g., 300KB) HTTP request can occupy one of the limited NGINX worker processes for minutes and consume almost all of the available CPU on the machine. Modsecurity 2 is similarly vulnerable: the affected versions include 2.8.0 through 2.9.4.(CVE-2021-42717)

 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0257-1 openSUSE-SU-2023:0257-1 — Security update for modsecurity 2026-10-04T03:21:25.207554+00:00

Security update for modsecurity

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-42717 UBUNTU-CVE-2021-42717 2026-10-04T03:21:25.207571+00:00

Affected: Ubuntu:Pro:16.04:LTS: modsecurity-apache, Ubuntu:Pro:18.04:LTS: modsecurity-apache, Ubuntu:20.04:LTS: modsecurity-apache, Ubuntu:20.04:LTS: modsecurity, Ubuntu:22.04:LTS: modsecurity, Ubuntu:24.04:LTS: modsecurity, Ubuntu:25.10: modsecurity, Ubuntu:26.04:LTS: modsecurity

ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web server being unable to service legitimate requests. Even a moderately large (e.g., 300KB) HTTP request can occupy one of the limited NGINX worker processes for minutes and consume almost all of the available CPU on the machine. Modsecurity 2 is similarly vulnerable: the affected versions include 2.8.0 through 2.9.4.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-04T03:21:25.207599+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.