1 Release published by 1 person

• v2.9.12

  published Aug 5, 2025

6 Pull requests merged by 2 people

• fix: add Windows specific characters to config value syntax

  #3430 merged Aug 3, 2025

• fix: mod_security2's regression tests fix

  #3425 merged Jul 29, 2025

• fix: rx operators better null checks

  #3426 merged Jul 29, 2025

• fix: integer type limits, 2nd try

  #3421 merged Jul 28, 2025

• fix: confusing indentation at acmp.cc

  #3424 merged Jul 28, 2025

• Refactoring the cleaning of MATCHED_VAR* variables

  #3422 merged Jul 27, 2025

1 Pull request opened by 1 person

• Add custom leading text to audit log lines

  #3432 opened Aug 4, 2025

7 Issues closed by 4 people

• Unable to parse absolute Windows path as value of modsecurity.conf directive

  #3429 closed Aug 3, 2025

• libModSecurity3: requests are blocked when `SecRequestBodyNoFilesLimit` is set to a very high value

  #3356 closed Jul 28, 2025

• curl with PUT method can upload a huge file (>2GB) on remote server but hangs and timeout

  #3352 closed Jul 28, 2025

• >=v3.0.13 release for ubuntu 22.04

  #3423 closed Jul 28, 2025

• Semantic of MATCHED_VARS / MATCHED_VARS_NAMES

  #3382 closed Jul 27, 2025

• Missing transaction logs for blocked request ingress-nginx

  #3351 closed Jul 13, 2025

• ModSecurity2 v2.9.11 not working on RHEL 7 due to undefined symbol: pcre2_set_depth_limit

  #3417 closed Jul 11, 2025

4 Issues opened by 4 people

• IP Collection not working properly

  #3416 opened Jul 11, 2025

• Recommended rule 200005 misses MSC_PCRE_LIMITS_EXCEEDED in phase 2

  #3415 opened Jul 9, 2025

• High RAM Usage with Concurrent Logging Mode in ModSecurity

  #3414 opened Jul 7, 2025

• request on iis with more than 999 characters single value in cookie are getting blocked and no specific rule to fix

  #3413 opened Jul 6, 2025

3 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Update verify_ssn.cc to fix new format

  #2971 commented on Jul 6, 2025 • 1 new comment

• @ipMatch misses IP with multiple values

  #2893 commented on Jul 14, 2025 • 0 new comments

• 408 http code generated by mod_reqtimeout is not detected

  #3007 commented on Aug 5, 2025 • 0 new comments