ModSecurity, “2.9.10” is not in vendor list

[czo]

Hi,

both of our cPanel servers are facing the following issue

[2025-06-05 05:15:47 +0000] [/usr/local/cpanel/scripts/modsec_vendor] The system failed to update the vendor from the URL “https://files.imunify360.com/static/...pache.yaml”: The vendor metadata does not contain an entry for your version of ModSecurity, “2.9.10”. The only versions of ModSecurity this rule set supports are “2.7.5”, “2.7.7”, “2.8.0”, “2.9.0”, “2.9.1”, “2.9.2”, “2.9.3”, “2.9.6”, “2.9.7”, “2.9.8”, “3.0.1”, “3.0.10”, “3.0.11”, “3.0.12”, “3.0.13”, “3.0.8”, and “3.0.9”.
[2025-06-05 05:15:47 +0000] E [/usr/local/cpanel/scripts/modsec_vendor] The “/usr/local/cpanel/scripts/modsec_vendor update --auto” command (process 1375086) reported error number 1 when it ended.

Modsecurity vendor is imunify in WHM, OWASP is not installed at all.

Has anybody come across this?

Thanks

[alevchenko]

Hello,

Please be informed that this is caused by the absence of ModSecurity 2.9.10 Support for Imunify360 vendor: https://files.imunify360.com/static/...ll-apache.yaml

As I can see, our developers have already been informed about this case, and they have added support for the new ModSecurity version today.

Imunify360 should soon get the latest release. Internal case ID WPT-1435 for reference: https://changelog.imunify.com/waf-rules

[alevchenko]

Hello,

Please be informed that this is caused by the absence of ModSecurity 2.9.10 Support for Imunify360 vendor: https://files.imunify360.com/static/...ll-apache.yaml

As I can see, our developers have already been informed about this case, and they have added support for the new ModSecurity version today.

Imunify360 should soon get the latest release. Internal case ID WPT-1435 for reference: https://changelog.imunify.com/waf-rules

[czo]

Thank you for your response
Looking forward to the update