CRS versions 4.28.0, 4.25.1 LTS, and 3.3.10 released

ciao70

• July 03, 2026 19:57

Hi,

The OWASP CRS team is pleased to announce three coordinated releases today: v4.28.0 (main branch), v4.25.1 (v4 LTS), and v3.3.10 (v3 LTS). All three fix the same two high-severity security vulnerabilities that affect all previous CRS releases. Users on any supported branch are strongly encouraged to update.

https://coreruleset.org/20260702/crs-versions-4.28.0-4.25.1-lts-and-3.3.10-released/

Modsecurity 2.9.14 (Security Fix)

OWASP CRS 3.3.x (EOL Q3 2026)

 

 

 

• 

  ciao70

  • August 27, 2026 20:22

  Since support for OWASP 3.3.x is almost over, is there any news regarding the move to 4.25.x?

  Thanks

  0
• 

  cPRex Jurassic Moderator

  • August 28, 2026 16:32

  I don't have anything official on my end yet, but we do have case CPANEL-56396 where we're doing some research on version 4.  

  0
• 

  ciao70

  • August 28, 2026 17:01

  Thanks :)

  0
• 

  cPRex Jurassic Moderator

  • August 28, 2026 17:02

  Of course :)

  0

Please sign in to leave a comment.