OWASP CRSOWASP CRS v4.25.0 LTS is out — the first Long-Term Support release for CRS 4.
Stability for production: security patches & critical fixes through Q3 2027. Formal backport policy, quarterly point releases, Docker images for ModSecurity & Coraza.
Still on CRS 3.3? This is your migration target.
https://coreruleset.org/20260321/announcing-crs-v4-25-lts/
#OWASP #CRS #WAF #AppSec #OpenSource
Stability for production: security patches & critical fixes through Q3 2027. Formal backport policy, quarterly point releases, Docker images for ModSecurity & Coraza.
Still on CRS 3.3? This is your migration target.
https://coreruleset.org/20260321/announcing-crs-v4-25-lts/
#OWASP #CRS #WAF #AppSec #OpenSource
Announcing CRS v4.25.0 LTS: Long-Term Support for CRS 4
We are excited to announce that CRS v4.25.0 is the first Long-Term Support (LTS) release for the CRS 4 series. This is a milestone we have been working towards for over two years, and it marks the point where organizations waiting for a stability commitment can confidently deploy CRS 4 in their production environments. What This Means for Users If you are currently running CRS 4.x, the v4.25.0 LTS gives you a stable foundation that will receive security patches and critical bug fixes for an extended period — without being forced to track our rapid development cycle. You get the protection, without the churn.