| Package | Affected versions | Patched versions |
|---|---|---|
| modsecurity | ≥ 3.0.0, < 3.0.4 | 3.0.4 |
ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: =abc" header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free