Some attacks did not rely on mod_rewrite. For instance, the splitting of response headers. The Apache vulnerabilities list provides a short summary of each: ht

Some attacks did not rely on mod_rewrite. For instance, the splitting of response headers. The Apache vulnerabilities list provides a short summary of each: https://httpd.apache.org/security/vulnerabilities_24.html https://httpd.apache.org/security/vulnerabilities_24.html The fixes are in versions 2.4.59 and 2.4.60. Then a fix of the fix of CVE-2024-39884 in 2.4.61. Then a better fix of CVE-2024-39884 in 2.4.62.