OGO Security - Notice history

Minor improvements related to XSS injection and node deserialization Drives

We are planning for a maintenance during that time.

Minor improvements and fixes related to SQL injection, XSS, and suspicious encoding detection

• Enhanced command injection detection

• Minor improvements & fixes

• New virtual patch - CVE-2025-61757

• Upgrade SQL injection and openredirect drives

• [fix] Could not set advanced site parameters in some cases

• API: will now return 401 status instead of 200 if auth token is missing or invalid

[Fix] My account/My Organization: tabs other than "Parameters" sometimes not showing

• Enhanced command injection detection

• Minor improvements & fixes

• Added virtual patches for in-the-wild CVE exploits

• Minor improvements & fixes

• Rollback IWA update

• Upgrade SQL Injection Drives

• Various optimisations

• Upgrade IWA module

• TLS security update

• Added virtual patches for in-the-wild CVE exploits

• Minor improvements & fixes

When updating a site with the API, tags, rules and rewrite rules were removed if not specified in the update.

New feature: IP Categories. Available for sites in Advanced mode.

• Boost credibility scoring when other anomalies are detected, or block specific IP categories such as Tor, VPN, Open Proxies, or Malware / C2 / Botnet.