apk package
chainguard/modsecurity-config
pkg:apk/chainguard/modsecurity-config
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-38285 | — | < 3.0.10-r0 | 3.0.10-r0 | Jul 26, 2023 | Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity. | ||
| CVE-2023-28882 | — | < 3.0.9-r0 | 3.0.9-r0 | Apr 28, 2023 | Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs cause a segfault in the Transaction class for some configurations. |
- CVE-2023-38285Jul 26, 2023affected < 3.0.10-r0fixed 3.0.10-r0
Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.
- CVE-2023-28882Apr 28, 2023affected < 3.0.9-r0fixed 3.0.9-r0
Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs cause a segfault in the Transaction class for some configurations.