-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

SSUMMARY

WebPros International, LLC has updated packages for EasyApache 4 with updated versions of Node.js 20 and ModSecurity 2. This release addresses vulnerabilities related to CVE-2025-27210 and CVE-2025-54571. We strongly encourage all Node.js 20 users to update to version 20.19.4 and all ModSecurity 2 users to update to version 2.9.12.
 

AFFECTED VERSIONS

All versions of Node.js 20 through 20.19.3.
All versions of ModSecurity 2 through 2.9.11.


SECURITY RATING
The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:

CVE-2025-27210 - HIGH
Node.js 20.19.4
Fixed vulnerability related to CVE-2025-27210.

CVE-2025-54571 - MEDIUM
ModSecurity 2.9.12
Fixed vulnerability related to CVE-2025-54571.


SOLUTION
WebPros International, LLC has released updated packages for EasyApache 4 25.26 on 2025 August 20, with Node.js 20 version 20.19.4 and ModSecurity 2 version 2.9.12. Unless you have enabled automatic package updates in your cron, update your system with either your package manager or WHM's Run System Update interface.


REFERENCES
https://www.cve.org/CVERecord?id=CVE-2025-27210
https://www.cve.org/CVERecord?id=CVE-2025-54571
https://github.com/nodejs/node/releases/tag/v20.19.4
https://github.com/owasp-modsecurity/ModSecurity/releases
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEtnCbTMb0IHf2mEGRlSG+3KvZTd8FAmimIYgACgkQlSG+3KvZ
Td/ZHBAAmjEvdf5n0jRrze4I7pb88fUYipm6wkQtqwDOV2Cl0N3+EBL5TQnALKVQ
c2TbhOjl93KjMnT/70l0uuX+c0uf1BC8w+5ws7YPyvSk/HVkhlPYHDj3GxaGHf9N
JbcE1W7FIPJlxwq85bFVGw88H4yAUP0sQ4IPyj1omp3kcodPCe90tOZpIN5Otqoe
VuQOnnZTekf9xbNeZJb6YowVl0groNy862R9S+EyjTmM3C7e6ny2lSXn3WqNcWF9
l5aABpvE6/cs7jDUOhfI24kw2gNChW3aPtisTuiFGiNle/AH9wDwmWnx2rvrqlUD
L/JAMuzwZ/ZoxrRi8ALT004TCZPGlLp9LF+mFkURdUlWG4YzIZuwa5KOa189kPBL
G4xNRWSoLPR8evh0dlx3GmmUQPOfZUrBZrr3PBSA184H5j5MaHZ8c8Pcb2DhskzL
T1B3hiBLSblpmeekICx3/c5i6yuTmZBAUAP5BORvei0hNNe9YptdE9/XcuVWAZMC
vsTshbptMQks6aWIjqfscwLrCHJXQRIfEAyfGUTny4j4R+PB76Q5AJyYbErKf6PC
iFbTBY4XYsGbuONs+welIz1GbNDJhO7y/2cxpEkd8rr8zAtCJrPnmRU9u9Wg6mTU
Yr0LynD1cvUCxS3A2725q3/Eg75veo2FKHJWNiKGufBd0f+SlXc=
=2LPb
-----END PGP SIGNATURE-----