All issues

Search results

XXE: the entity declaration is not present in any variable CRS rules target

Status: Open.

#4767 In coreruleset/coreruleset;

· fzipi opened on Aug 19, 2026

restricted-files.data covers files but not framework management endpoints

Status: Open.

#4766 In coreruleset/coreruleset;

· fzipi opened on Aug 19, 2026

Detect WordPress plugin/theme metadata enumeration (readme.txt and friends)

Status: Open.

#4765 In coreruleset/coreruleset;

· fzipi opened on Aug 19, 2026

FP 932237: two-letter shell commands match browser User-Agent locale tags (es-es, nl-nl) at PL3

Status: Open.

#4761 In coreruleset/coreruleset;

· fzipi opened on Aug 16, 2026

Integer MAX value is recognised as malicius

➕ False Positive

Status: Open.

#4754 In coreruleset/coreruleset;

· zeljko-vukovic opened on Aug 7, 2026

Rule 932160 blocks submitting URLs containing /cgi-bin/show.pl

➕ False Positive

Status: Open.

#4753 In coreruleset/coreruleset;

· Fregf opened on Aug 6, 2026

feat: keyless (cosign/Sigstore) signing as GPG replacement for release artifacts

👍 Feature Request

Status: Open.

#4751 In coreruleset/coreruleset;

· fzipi opened on Aug 3, 2026

False positive with content type application/x-amz-json-1.1

➕ False Positive

Status: Open.

#4734 In coreruleset/coreruleset;

· HackingRepo opened on Jul 21, 2026

Serious Backtick MySQL sqli payloads not detected from PL1 to PL3

➖ False Negative - Evasion

Status: Open.

#4733 In coreruleset/coreruleset;

· HackingRepo opened on Jul 20, 2026

One SSTI payload left undetected from PL1 to PL3

➖ False Negative - Evasion

Status: Open.

#4732 In coreruleset/coreruleset;

· HackingRepo opened on Jul 20, 2026

feat: Detect SOAP/JAX-WS ThreadLocal Authentication Bypass

👍 Feature Request

Status: Open.

#4731 In coreruleset/coreruleset;

· HackingRepo opened on Jul 20, 2026

SQLi detection bypass via single-pass percent-encoded SQL syntax

➖ False Negative - Evasion

Status: Open.

#4722 In coreruleset/coreruleset;

· kuuhakunk opened on Jul 19, 2026