CVE-2026-61619

The OWASP core rule set (CRS) is vulnerable to a Regular-expression Denial of Service (ReDoS) affecting versions prior to 3.3.10, 4.25.1, and 4.28.0 . The root cause is an ambiguous pattern in a shared regex-assembly include used for Unix RCE detection rules (specifically 12 rules in CRS v4 and 4...