CRS versions 4.28.0, 4.25.1 LTS, and 3.3.10 released

Hi,

The OWASP CRS team is pleased to announce three coordinated releases today: v4.28.0 (main branch), v4.25.1 (v4 LTS), and v3.3.10 (v3 LTS). All three fix the same two high-severity security vulnerabilities that affect all previous CRS releases. Users on any supported branch are strongly encouraged to update.

https://coreruleset.org/20260702/crs-versions-4.28.0-4.25.1-lts-and-3.3.10-released/

Modsecurity 2.9.14 (Security Fix)

OWASP CRS 3.3.x (EOL Q3 2026)