UpHeron
All vulnerabilities

Servers and applications

CVE-2025-52891

Empty XML tag causes segmentation fault

Severity
Medium 6.5
Published
1 Jul 2025
Last changed
1 Jul 2025
Added to UpHeron
3 Nov 2026
Fixed in
2.9.11
Also known as
GHSA-gw9c-4wfm-vj3x
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
ModSecurityServers and applications · github:owasp-modsecurity/modsecurity
  • From 2.9.8 before 2.9.11

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-52891
  • GitHub Advisory Database https://github.com/advisories/GHSA-gw9c-4wfm-vj3x
  • github.com https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-gw9c-4wfm-vj3x