There are 2 open security issues in buster.
1 issue left for the package maintainer to handle:
- CVE-2019-25043:
(needs triaging)
ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: =abc" header.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/m/modsecurity.png){kind=link}