Bitnami modsecurity

Name: Bitnami modsecurity
Brand: Bitnami

productUS

pkg:bitnami/modsecurity

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical11high2medium0low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-42717US	high7.5	3.25% (88th)	Exploit	2.9.5	2021-12-07	2.0.0 → 2.9.5
CVE-2025-47947US	—	0.60% (48th)	Exploit	3.0.12	2025-05-21	< 3.0.12
CVE-2020-15598US	high7.5	2.92% (87th)	—	3.0.5	2020-10-06	3.0.0 → 3.0.5
CVE-2022-48279US	high7.5	1.17% (67th)	—	2.9.6	2023-01-20	< 2.9.6
CVE-2023-24021US	high7.5	0.91% (60th)	—	2.9.7	2023-01-20	< 2.9.7
CVE-2023-38285US	high7.5	0.90% (59th)	—	3.0.10	2023-07-26	3.0.0 → 3.0.10
CVE-2025-48866US	—	0.83% (57th)	—	3.0.12	2025-06-02	< 3.0.12
CVE-2024-46292US	—	0.82% (57th)	—	3.0.13	2024-10-09	3.0.12 → 3.0.13
CVE-2023-28882US	high7.5	0.73% (54th)	—	3.0.9	2023-04-28	3.0.5 → 3.0.9
CVE-2024-1019US	high8.6	0.69% (53rd)	—	3.0.12	2024-01-30	3.0.0 → 3.0.12
CVE-2025-27110US	high7.5	0.48% (42nd)	—	3.0.14	2025-02-25	3.0.13 → 3.0.14
CVE-2026-52747US	high8.6	0.48% (41st)	—	3.0.16	2026-07-10	< 3.0.16
CVE-2026-30923US	high7.5	0.43% (38th)	—	3.0.15	2026-05-05	3.0.0 → 3.0.15
CVE-2026-52761US	medium5.3	0.41% (35th)	—	3.0.16	2026-07-10	3.0.0 → 3.0.16
CVE-2026-42268US	high7.5	0.40% (34th)	—	3.0.15	2026-05-12	3.0.0 → 3.0.15
CVE-2025-52891US	—	0.38% (32nd)	—	3.0.12	2025-07-02	2.9.8 → 3.0.12
CVE-2025-54571US	medium6.1	0.33% (25th)	—	2.9.12	2025-08-06	< 2.9.12

The flaw types (CWEs) most of these CVEs share.

CWE-1050Excessive Platform Resource Consumption within a Loop2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-170Improper Null Termination1 CVEs
CWE-172Encoding Error1 CVEs
CWE-180Incorrect Behavior Order: Validate Before Canonicalize1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.