Multiple issues have been fixed in modsecurity-crs, a set of generic attack detection rules for use with ModSecurity. CVE-2020-22669

Source: Debian 11: modsecurity-crs Advisory DLA-4265-1 SQL Injection Bypass