https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:41:06.194136+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-27110 CVE-2025-27110 — Libmodsecurity3 has possible bypass of encoded HTML entities 2026-10-03T22:41:06.195212+00:00

Affected: owasp-modsecurity ModSecurity

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsecurity3 version 3.0.13 means that, in 3.0.13, Libmodsecurity3 can't decode encoded HTML entities if they contains leading zeroes. Version 3.0.14 contains a fix. No known workarounds are available.