Known Vulnerabilities for products from OWASP
Listed below are 20 of the newest known vulnerabilities associated with the vendor "OWASP".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114099 json | Not Provided | 2026-10-21 | 2026-10-21 | |
| CVE-2026-107835 json | Not Provided | 2026-10-09 | 2026-10-09 | |
| CVE-2026-107834 json | Not Provided | 2026-10-09 | 2026-10-13 | |
| CVE-2026-107833 json | Not Provided | 2026-10-09 | 2026-10-09 | |
| CVE-2026-107826 json | Not Provided | 2026-10-09 | 2026-10-09 | |
| CVE-2026-107825 json | Not Provided | 2026-10-09 | 2026-10-14 | |
| CVE-2026-104774 json | Not Provided | 2026-10-12 | 2026-10-13 | |
| CVE-2026-92136 json | Not Provided | 2026-09-16 | 2026-09-16 | |
| CVE-2026-52761 json | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 thr... | Not Provided | 2026-07-10 | 2026-07-14 |
| CVE-2026-52747 json | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 3.0.1... | Not Provided | 2026-07-10 | 2026-07-14 |
| CVE-2026-42268 json | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 to ... | Not Provided | 2026-05-12 | 2026-05-14 |
| CVE-2026-41510 json | Not Provided | 2026-10-12 | 2026-10-15 | |
| CVE-2026-41508 json | Not Provided | 2026-10-12 | 2026-10-13 | |
| CVE-2026-40316 json | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. ... | Not Provided | 2026-04-15 | 2026-05-21 |
| CVE-2026-33691 json | The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. P... | Not Provided | 2026-04-02 | 2026-07-24 |
| CVE-2026-30923 json | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Libmodsecurity... | Not Provided | 2026-05-05 | 2026-07-25 |
| CVE-2026-21876 json | The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. P... | Not Provided | 2026-01-08 | 2026-04-09 |
| CVE-2026-3816 json | A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input_zi... | Not Provided | 2026-03-09 | 2026-04-29 |
| CVE-2025-66022 json | FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in... | Not Provided | 2025-11-26 | 2026-10-18 |
| CVE-2025-66021 json | OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-par... | Not Provided | 2025-11-26 | 2026-10-18 |
Known software with vulnerabilities from OWASP
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Owasp | Dependency-check | 0.2.0 |
| Application | Owasp | Dependency-track | - |
| Application | Owasp | Enterprise Security Api | 2.0 |
| Application | Owasp | Json-sanitizer | 1.0 |